Cascade top doc restrictions not working

[novaleaf]

Issue: I have "Temporarily set top-level sites to TRUSTED" and "Cascade top document's restrictions to subdocuments" checked. In the past, this seemed to work as I expected, as sites behaved "normally" unless I further restrict a resource like blocking facebook or the such.

A few days ago websites started breaking. Now I need to open NoScript and manually set various subdocuments to TRUSTED or TEMP TRUSTED. Basically it seems that the cascade feature is no longer working.

I think this might be a bug that started occurring when I upgraded to Firefox 86, which probably happened automatically a few days ago (about the time I started seeing sites break)

As an example, you could go to https://assetstore.unity.com/ and type something in the "Search for assets" box at the top of the screen. Unless you manually allow storage.googleapis.com the search feature will not work.

I tried Resetting NoScript options but same issue. I'm using version 11.2.3, from the Firefox Addons store. I disabled all my other addons when testing.

[barbaz]

That's not what that option means -

The actual effect is more like "Block subdocuments from having more permissions than their top document".

viewtopic.php?f=7&t=25593

[Giorgio Maone]

Issue: I have "Temporarily set top-level sites to TRUSTED" and "Cascade top document's restrictions to subdocuments" checked. In the past, this seemed to work as I expected, as sites behaved "normally" unless I further restrict a resource like blocking facebook or the such.

As barbaz pointed out, the "old behavior" was not the expected one, since "Cascade top document's restrictions" is not supposed to cascade permissions.

However, what you're probably looking for is configure the DEFAULT preset with a more permissive set of capabilities (like "TRUSTED"), and setting those sites you want to restrict to the UNTRUSTED preset.

[novaleaf]

Okay thank you. That makes sense, I'll probably end up expanding default permissions, but will try to start by manually approving sites.

[Giorgio Maone]

But will try to start by manually approving sites.

Good idea, it's the safest usage pattern