InformAction Forums

The case study is good, has some nice pointers and I can agree with most of it. I'm also happy that we finally get the site specific rule-sets. However, my biggest worry is that there still does not appear to be easy way to check the "seen" tags. Personally I never use the allow all/tab options but ...

The reason why mipulse.co does not appear in the list is because the site does not try to access it until the "pin" is clicked, however, unless mipulse.co is already allowed, the site will quickly redirect to the error page, leaving user no time to check the updated list. This situation can happen i...

Seems this was a short lived hack. That is, if Mozilla does as it says and implements the Cross-origin communication part of Manifest v3. Which means that there is no using bogus url with XHR due to CORS restrictions even in contentscript context and thus no way to get response on ftp, file or about...

Couldn't remember if I had tried data-uris, so I made a quick test. XMLHttpRequest accepts them fine but there appears to be no way to modify the request or redirect it to another data- or resource-uri. Filter has no effect and neither onBeforeSendHeaders or onHeadersReceived is fired. However, redi...

SyncMsgExample manifest.json { "manifest_version": 2, "name": "SyncMsgExample", "version": "1.0", "description": "Testing communication with background page through synchronous XHR and filterResponseData.", "applications": { "gecko": { "id": "syncmsgexample@example.com", "strict_min_version": "60.0"...

WebRequestFilterSuspendTest manifest.json { "manifest_version": 2, "name": "WebrequestFilterSuspendTest", "version": "1.0", "description": "Tests WebRequest suspending to execute script.", "applications": { "gecko": { "id": "webrequestfiltersuspendtest@example.com", "strict_min_version": "60.0" } },...

Was going to upload the code to GitHub, but it turns out they had added some security measures and now my account is so secure that I can't log in anymore. Sigh. Pasting the code below because do not feel like creating a new account now.

Ended up taking a closer look at how NoScript handles the "Disable restrictions for this tab". Turns out the "cookie method" has couple of bugs and problems. Testing on https://www.theguardian.com shows several CSP errors in the log. These appear to be due to the following reasons: In RequestGuard.j...

I see nothing out of ordinary on YouTube.
What are your current useragent overrides?
Screenshot of the problem?

I did send a reminder to Giorgio about this after the latest rc came out.

So it looks like. Thanks Giorgio!

Unfortunately not.

Wikimedia Ogg format media files fail to load. This is due to them being served with content-type application/ogg. This content-type is mistakenly categorized as object in embeddingDocument.js and blocked if objects are not allowed. Happens constantly on FF68 but not on the prior versions. Edit: exa...

NoScript doesn't block Flash per se, it blocks objects. Not sure if there is any easy and reliable way to detect if object is in fact Flash...

Looks like similar case as with the ClearClick.