InformAction Forums

Which NoScript version are you using?

NoScript makes no attempt to block images, since they're not active, therefore not considered a threat to your computer.

Scripts belong to the domain that they're hosted on. There really isn't any "belonging" beyond that.

For adblocking reasons you might want to track which sites load which other sites, but for security purposes, "Do I trust x.com" shouldn't depend on where it's being loaded.

Can you verify that this issue stops occurring if you disable NoScript?

NoScript 10 is very much a work in progress. Does this happen with the latest version?

There used to be this nice options in the settings "Temporarily allow top-level sites by default" That setting may or may not come back (Giorgio has a lot to do with the transition to Firefox 57); however, it's important to note that it did not provide reliable protection. All you needed ...

Giorgio has been compelled to completely rewrite the GUI due to the changes in Firefox 57+.

Does it continue if you disable NoScript?

Which version of NoScript are you trying to reinstall? You'll need to use 5.x for Firefox 56 or below.

The XSS filter in the latest NoScript is more aggressive than previous versions. Please be patient while bugs are fixed, or else switch to Firefox 52 ESR with classic NoScript.

It's not possible to retain most of the old GUI in Firefox 57+, unfortunately. Mozilla has made fundamental changes under the hood, and the scope of what extensions can do is much more limited.

There are a lot of XSS false positives at the moment. Please be patient while Giorgio works through the outstanding issues.

If you'd prefer to keep using classic NoScript, you can switch to Firefox 52 ESR.

NoScript actually isn't about keeping you from being tracked; it's about keeping you from being hacked.

Keeping that many is probably a bug though.

Which sites have you allowed vs blocked?

If NoScript is reporting a cross-site scripting risk, then it's worth checking whether the site is, in fact, vulnerable (in which case, it might be worth reconsidering your use of it). Can you provide URLs where this occurs?