How to enable restrictSubdocScripting in NoScript 10?

Ask for help about NoScript, no registration needed to post
barbaz
Senior Member
Posts: 9147
Joined: Sat Aug 03, 2013 5:45 pm

How to enable restrictSubdocScripting in NoScript 10?

Post by barbaz » Sun Jun 09, 2019 5:37 pm

According to viewtopic.php?f=7&t=25395 this feature has already been ported. But in my NoScript 10.6.3rc7 on Waterfox 68, it's disabled. How to enable restrictSubdocScripting?
*Always* check the changelogs BEFORE updating that important software!
-

barbaz
Senior Member
Posts: 9147
Joined: Sat Aug 03, 2013 5:45 pm

Re: How to enable restrictSubdocScripting in NoScript 10?

Post by barbaz » Wed Jun 12, 2019 12:55 am

Ok found it: NoScript Options > General > "Cascade top document's restrictions to subdocuments"

IMO that is somewhat misleading wording. It implies that, for example, if a Trusted page embeds a Default frame, the frame would automatically become Trusted. The actual effect is more like "Block subdocuments from having more permissions than their top document".
*Always* check the changelogs BEFORE updating that important software!
-

jawz101
Senior Member
Posts: 66
Joined: Sun Jul 10, 2011 11:13 pm

Re: How to enable restrictSubdocScripting in NoScript 10?

Post by jawz101 » Fri Aug 23, 2019 3:39 am

I still don't understand this pref. So you are saying checked would mean it is a stricter policy?

"Cascade top document's restrictions to subdocuments"

To me this sounds like a looser policy. I would rather a subdocuments' permissions be granted or restricted separately. If I allow script/frame/images/fonts/etc on a primary page that doesn't necessarily mean I want to allow them on a subdocument. Right?

What stinks is there is absolutely no explanation what this preference is for except that it is for the TOR project. Even so, does that imply the TOR project would want this pref checked or not?

It's dumb.
Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Firefox/68.0

musonius
Senior Member
Posts: 99
Joined: Sun Jul 08, 2018 5:38 pm

Re: How to enable restrictSubdocScripting in NoScript 10?

Post by musonius » Fri Aug 23, 2019 5:42 am

jawz101 wrote:
Fri Aug 23, 2019 3:39 am
To me this sounds like a looser policy. I would rather a subdocuments' permissions be granted or restricted separately. If I allow script/frame/images/fonts/etc on a primary page that doesn't necessarily mean I want to allow them on a subdocument. Right?
No. It's not about inheriting permissions to subdocuments, it's about inheriting restrictions to subdocuments. For example, if you do not allow 'media' for the first party domain, 'media' won't be allowed for any subdocument (not even for those for which you have allowed 'media').
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0

Post Reply