Search found 9206 matches
- Thu Jul 06, 2023 6:40 am
- Forum: NoScript Support
- Topic: How to retrieve permissions if add-on re-installed?
- Replies: 4
- Views: 1105
Re: How to retrieve permissions if add-on re-installed?
I suppose you can use Time Machine to restore the previous state of your profile, [Export] the NoScript settings and then go back to current and [Import]?
- Mon Jul 03, 2023 8:34 pm
- Forum: NoScript Support
- Topic: [Unrelated] NoScipt refuses to unblock some pages
- Replies: 11
- Views: 9709
Re: NoScipt refuses to unblock some pages
On such page (if the link is still valid) is https://attcx.sjc1.qualtrics.com/jfe/form/SV_3WUYNSRjrHWzTVA?Q_DL=39xSVYXraE1ys8I_3WUYNSRjrHWzTVA_CGC_7byD3oYQwuWkO5p&Q_CHL=email It's a survey page for AT&T. This page works for me, I just had to set qualtrics.com to temp. TRUSTED. Howev...
- Sun Jul 02, 2023 10:46 pm
- Forum: NoScript Development
- Topic: [FIXED] Popup does not show contextual permissions for Full Domain contexts
- Replies: 6
- Views: 7289
- Sun Jul 02, 2023 3:19 pm
- Forum: NoScript Development
- Topic: [FIXED] Popup does not show contextual permissions for Full Domain contexts
- Replies: 6
- Views: 7289
Re: Popup does not show contextual permissions for Full Domain contexts
Should be fixed in latest development build, thanks.
v 11.4.25rc1
============================================================
x Fixed UI inconsistencies when finer-grained contextual
policies are created/imported by other means (thanks barbaz
for reporting)
v 11.4.25rc1
============================================================
x Fixed UI inconsistencies when finer-grained contextual
policies are created/imported by other means (thanks barbaz
for reporting)
- Fri Jun 30, 2023 7:35 pm
- Forum: NoScript Support
- Topic: [RESOLVED] TG symbol on NoScript icon in Firefox
- Replies: 2
- Views: 2053
Re: TG symbol on NoScript icon in Firefox
It's the latest, quieter iteration of TabGuard (Cross-site identity leak protection).
- Wed Jun 28, 2023 4:10 pm
- Forum: NoScript General
- Topic: 11.4.23rc1 changelog contradicts NoScript Options
- Replies: 11
- Views: 10188
Re: 11.4.23rc1 changelog contradicts NoScript Options
Does this not mean that by having selected "Load normally" a.com from b.com, that a.com is already then able to attack b.com using that same tab pair? That's correct theoretically, but at this stage a.com has no way (yet) to choose which content is opened in b.com, something which is inte...
- Wed Jun 28, 2023 3:40 pm
- Forum: NoScript General
- Topic: 11.4.23rc1 changelog contradicts NoScript Options
- Replies: 11
- Views: 10188
Re: 11.4.23rc1 changelog contradicts NoScript Options
So I didn't understand correctly? - v 11.4.24rc1 ============================================================ x [TabGuard] Stop exempting domains bidirectionally by default This change just means that now if you chose to "Load normally" a.com from b.com, you will still get asked what to d...
- Wed Jun 28, 2023 2:40 pm
- Forum: NoScript Development
- Topic: [FIXED] Cross-tab identity leak protection warning about a site potentially attacking itself
- Replies: 2
- Views: 5884
Re: Cross-tab identity leak protection warning about a site potentially attacking itself
Fixed in latest dev build , thanks: v 11.4.24rc1 ============================================================ x [TabGuard] Stop exempting domains bidirectionally by default x [TabGuard] Fix destination domain being reported as the trigger of a warning prompt when all the other tab-tied domains have ...
- Tue Jun 27, 2023 5:10 pm
- Forum: NoScript Development
- Topic: [FIXED] Cross-tab identity leak protection warning about a site potentially attacking itself
- Replies: 2
- Views: 5884
Re: Cross-tab identity leak protection warning about a site potentially attacking itself
Interesting. Investigating, thanks.
- Mon Jun 19, 2023 10:06 pm
- Forum: NoScript General
- Topic: [Resolved] Cross-tab identity leak protection
- Replies: 21
- Views: 19122
Re: Cross-tab identity leak protection
Thanks Giorgio for the info & fixes! https://i.psyche.me/thumbsup_left.gif But in 11.4.23rc4 I no longer get the warning following STR in https://forums.informaction.com/viewtopic.php?p=106035#p106035 , but you're saying it was correct for the warning to happen there? 11.4.23rc3 and above takes...
- Fri Jun 16, 2023 6:24 am
- Forum: NoScript General
- Topic: [Resolved] Cross-tab identity leak protection
- Replies: 21
- Views: 19122
Re: Cross-tab identity leak protection
1) So cookies are the only thing that needs to be anonymized to fully stop this attack, and the use of Containers for the anonymous load would be overkill? Cookies and the Authorization header. Basically we don't want the user to be logged in on a site loaded in a tab which can be monitored by anot...
- Fri Jun 16, 2023 6:13 am
- Forum: NoScript General
- Topic: [Resolved] Cross-tab identity leak protection
- Replies: 21
- Views: 19122
Re: Cross-tab identity leak protection
Also, another case I wonder about? - Firefox 109.0.1 NoScript 11.4.15rc1 new profile STR: 1) NoScript Options > Advanced, set Cross-tab identity leak protection Enabled everywhere 2) NoScript Options > Per-site Permissions, set github.com and flathub.org to Trusted 3) go to https://flathub.org/ 4) ...
- Fri Jun 16, 2023 5:55 am
- Forum: NoScript General
- Topic: [Resolved] Cross-tab identity leak protection
- Replies: 21
- Views: 19122
Re: Cross-tab identity leak protection
At (5), the cross-tab identity leak protection claims that informaction.com can obtain github.com login data at that load, even though the opener tab is github.com. Does the exploit also work through "chaining" opener tabs like this? Yes, it can. As long as there's one tab in control of t...
- Wed May 24, 2023 11:24 am
- Forum: NoScript Support
- Topic: Pinned tab not reloading
- Replies: 5
- Views: 1297
Re: Pinned tab not reloading
The changes between 11.4.21 and 11.4.22 are very unlikely to affect tab loading, unless your pinned tabs are data: or file:// URLs (and cannot have anything to do with Youtube). Is that the case? Does downgrading to 11.4.21 actually help (and upgrading again break those tabs again)? Also, Firefox 88...
- Tue May 23, 2023 7:05 am
- Forum: NoScript General
- Topic: 11.4.23rc1 changelog contradicts NoScript Options
- Replies: 11
- Views: 10188
Re: 11.4.23rc1 changelog contradicts NoScript Options
And if the current wording of NoScript Options is the correct one, could the aforementioned issues with this please be addressed before this gets to NoScript stable channel? Otherwise it's just asking for a deluge of difficult support requests, if many people use Cross-tab identity leak protection....