ABE issue (sandbox) with NoScript 2.9.5.3rc6

[johnscript]

Following the advice given in this thread ABE seems to be broken since the latest release [2.9.5.1] I've first added the line

Code: Select all

Accept from chrome: moz-nullprincipal:

right after the Site .mysite.com line, then tried to change it to

Code: Select all

Sandbox from chrome: moz-nullprincipal:

- and it worked in 2.9.5.2 with no issues that I was aware of.

However, this doesn't work anymore in NoScript 2.9.5.3 and 2.9.5.3rc6 : the sandbox rule posted above basically breaks the temporary allow function of NoScript, that line now has to be either

Code: Select all

Accept from chrome: moz-nullprincipal:

or

Code: Select all

Anon from chrome: moz-nullprincipal:

because when using sandbox no website can be allowed - for instance when clicking temporary allow noscript.net it allows https://noscript.net but leaves another entry in the menu icon http://noscript.net that can' t be allowed.

Is this a bug, or is it actually wrong to substitute sandbox for accept in that line?

Speaking of which, will the need for such workaround be removed at some point, or will this be needed from now on ?

[barbaz]

It's not a bug. ABE Sandbox didn't do anything at all in 2.9.5.2.

[johnscript]

Just to be clear, what we are saying here is that sandbox in NoScript 2.9.5.2 didn't really do anything?

And consequently every Sandbox rule in 2.9.5.2 was actually equivalent to Accept?

If so, I would gather that the behaviour described above with 2.9.5.3 is the intended one, as Sandbox from chrome: moz-nullpricipal: will basically deny scripts for the current website, correct?

[barbaz]

All correct.