Hidden default whitelist!? PLEASE GET RID OF IT!
Posted: Fri May 15, 2020 1:39 pm
I just discovered to my horror that NoScript has a default "whitelist" (hidden to users) which allows scripts like YouTube, Google and Gstatic to run automatically without the user's permission!
Frankly I find this outrageous! Like many people, I use NoScript for privacy - so I can ONLY allow a script on rare occasions when I choose to. The very last site I want to run scripts from is big organizations like Google, who track users and collect data. Has NoScript been bought out by Google?
If you are not controlled by Google then I urge you to either:
1) Remove this hidden "whitelist" from your add-on so that Google (or any site) is not allowed by default!
2) If you insist on including the whitelist then make it optional, ask users if we want it when we install the add-on, and add an option to disable it. (There is no mention of any "whitelist" in the options.)
Frankly I find this outrageous! Like many people, I use NoScript for privacy - so I can ONLY allow a script on rare occasions when I choose to. The very last site I want to run scripts from is big organizations like Google, who track users and collect data. Has NoScript been bought out by Google?
If you are not controlled by Google then I urge you to either:
1) Remove this hidden "whitelist" from your add-on so that Google (or any site) is not allowed by default!
2) If you insist on including the whitelist then make it optional, ask users if we want it when we install the add-on, and add an option to disable it. (There is no mention of any "whitelist" in the options.)