InformAction Forums

rnc wrote:If something is in 'red padlock' does that mean its match to HTTPS or matching to HTTP?

Both HTTP and HTTPS. The red padlock indicates danger (i.e., NoScript is allowing content from insecure pages). The green padlock indicates safety (i.e., NoScript is only allowing content from HTTPS pages).

bo elam wrote:If we click Revoke Temporary Permissions in the NoScript menu, all temporary permissions are reversed.

But that's impossible if all tabs are visiting about:... or AMO pages. The NoScript menu does not display. Clicking the toolbar icon opens the settings page.

geek99 wrote:Does anyone else (besides me) want to have a "Revoke Temporary Permissions" button on the Options page?

+1 from me too. Several times a week, I find myself in the the situation where I need to visit a page just to revoke temporary permissions.

sea_sea wrote:'Make trust permanent' and 'Make trust temporary'.

I second this. IMHO, tooltips that start with verbs are more intuitive.

See https://forums.informaction.com/viewtop ... 501#p94456

Do you mean other tabs you already loaded? Should this matter? NoScript Classic would re-load already-open pages when any trust change affects those pages. Doesn't NoScript 10.x do the same? Why do you ask this instead of just trying it out for yourself? I should have. My apologies. The current beh...

Pansa wrote:Do you mean other tabs you already loaded?

Should this matter? NoScript Classic would re-load already-open pages when any trust change affects those pages. Doesn't NoScript 10.x do the same?

SafeTex wrote:What is a good general setting for sites and why?

I uncheck all checkboxes in the DEFAULT and UNTRUSTED presets. In the TRUSTED preset, I check every checkbox except WebGL. So few of the pages I visit use WebGL that I just prefer not to download such content unless I absolutely have to.

The only clocks i see says revoke temp permissions and temp allow this page I don't see anything that says permanent, should be a permanent button will help with the confusion The first time you click TRUSTED for a domain, there's large clock icon that means the trust is temporary: https://i.imgur....

Yes I think that is intentional. Thanks. That could have negative security implications. Users have to remember that TRUSTED is temporary after one click, but CUSTOM is permanent after one click. If they forget either or get it backwards (and fail to notice the clock icon), then get the opposite pe...

Using NS 10.1.5.7 in FF 57.0.2 on Windows 10, when I visit http://www.oracle.com/technetwork/java/index.html , a page where I have never granted any trust to any domain, if I click just once on CUSTOM for a domain, the clock indicates the custom trust will permanent (see screenshot below). Is it int...

bo elam wrote:The scripts globally allowed setting is not working right now as it did in version 5. Hopefully it will sometime in the future.

Can you elaborate on how Scripts Globally Allowed works differently in 10.x compared to 5.x? Thanks in advance!

Timbre wrote:I can't work out this interface either.

Start with this NoScript 10.x Guide.

Guest wrote:Same for me and LinkedIn, ...

LinkedIn.com works for me using NoScript 10.1.5.7 in FF 57.0.2 on Windows 10. Here's the popup settings that I see when visiting https://www.linkedin.com/feed/:

eelgheez wrote:I do not understand why the plugin allows enabling permissions only temporarily by default.

I think the rationale was that we mark domains as temporarily trusted far more often than we mark them permanently trusted, therefore the more common operation should take fewer mouse clicks.