A toggle for svg

Bug reports and enhancement requests
Post Reply
informak98
Posts: 2
Joined: Fri Sep 10, 2021 9:37 pm

A toggle for svg

Post by informak98 » Fri Sep 10, 2021 9:41 pm

Is there a way to allowing enable/disable svg with noscript. I ask because it would be very useful in Tor browser in safest setting instead of changing safety setting we could use noscript to enable svg graphics for trusted sites.
Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0

barbaz
Master Bug Buster
Posts: 10040
Joined: Sat Aug 03, 2013 5:45 pm

Re: A toggle for svg

Post by barbaz » Sat Sep 11, 2021 12:59 am

This is not currently a feature of NoScript. What security threat would this protect against?
Temporarily off forum staff at my own request
*Always* check the changelogs BEFORE updating that important software!
-

informak98
Posts: 2
Joined: Fri Sep 10, 2021 9:37 pm

Re: A toggle for svg

Post by informak98 » Sat Sep 11, 2021 5:40 am

XSS attacks (which noscript already solves), HTML injection, Billion Laughs Attacks, DOS attacks, etc.
Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0

Asphyx
Posts: 8
Joined: Mon Oct 04, 2021 8:40 am

Re: A toggle for svg

Post by Asphyx » Mon Oct 25, 2021 9:27 am

I wrote a Userscript for a button to toggle SVG. Works fine but unfortunally, Torbrowser bundles this setting with NoScript-settings. When switch off SVG, all individual NoScript-settings are removed. :-(

PS. Tried to insert the script here, but: "Ooops, something in your posting triggered my antispam filter...
Please use the "Back" button to modify your content and retry."
--
Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0

Post Reply