noscript blocks access to external json file?

[dothebart]

Hi,
noscript blocks our Database frontend when fetching external json files - the source where this happens is here:

https://github.com/arangodb/arangodb/bl ... iew.js#L38

It should i.e. fetch this file:
https://raw.githubusercontent.com/arang ... ifest.json

and parse the JSON.

Can you please explain why noscript intercepts this, and whether there is a smarter way to do it.

TIA,
Willi

[therube]

(Not sure what I'm looking at/for, but I'll note that githubassets.com doesn't look to turn up, & presumably it should?)

[skriptimaahinen]

Sanity check: you do have fetch enabled for the domain the json is fetched from, e.g. raw.githubusercontent.com?

[dothebart]

it didn't work for me until I put the slider to 'temporarily trusted' - since thats a broad domain where everyone puts stuff to having it allowed seems rather dangerous to me, thats why I would like to know why 'external' download URLs are blocked in this case.

Is there a way to only allow download?

[skriptimaahinen]

By default NoScript has fetch permission enabled for DEFAULT-preset. This should allow downloading (fetching/XHR) from all domains that have no explicit permissions set. However, if you have removed fetch permission from DEFAULT, you can allow it for domain of your choice by setting that domain to CUSTOM and only ticking fetch.