What do the individual checkboxes for Default/Trusted/Untrusted/Custom mean?

Ask for help about NoScript, no registration needed to post
Master Bug Buster
Posts: 10038
Joined: Sat Aug 03, 2013 5:45 pm

What do the individual checkboxes for Default/Trusted/Untrusted/Custom mean?

Post by barbaz » Mon Mar 29, 2021 6:19 pm

script - JavaScript, e.g. <script> tags

object - plugin objects (usually Flash, Java applets, Silverlight, etc)

media - HTML5 audio/video

frame - subdocuments, e.g. <frame> and <iframe>

font - remote fonts

webgl - WebGL

fetch - whether other sites can make XMLHttpRequest and Fetch request to this site

ping - destination of navigator.sendBeacon and hyperlink ping attribute

noscript - whether to show the contents of <noscript> elements where NoScript blocks scripts (which can happen either by disabling "script" permission for the site, or having "Any capability blocked in the top document must be blocked in its subdocuments too" enabled - see viewtopic.php?p=103640#p103640 )

"unrestricted CSS" - when disabled for a site, NoScript mitigates pure-CSS exploits (e.g. CSS PP0) on pages served by that site

other - requests where Firefox cannot identify the request type (ref https://hackademix.net/2017/12/04/noscr ... ment-39964)


(Last updated for NoScript 11.2.8. Originally posted in reply to viewtopic.php?f=7&t=24046 , which also hosts the related discussion.)
Temporarily off forum staff at my own request
*Always* check the changelogs BEFORE updating that important software!