Settings: noscript checkbox

[harryray22]

I was looking through the settings and I just noticed that in the default, trusted and untrusted section there is a checkbox for 'noscript'. What does that refer too? I'm a bit confused by it.

Thanks.

[barbaz]

See the sticky - viewtopic.php?t=26285

[harryray22]

Thanks, to be honest I didn't really totally understand it.
In general, is allowing this OK and is it better to allow it , or does allowing it present a security risk of any kind?

[barbaz]

It's generally better to allow it since it helps sites degrade gracefully when scripts are disabled. The security risk would involve a <meta> refresh inside a <noscript> element redirecting you somewhere bad, but Firefox can intercept those: about:config > set accessibility.blockautorefresh to true.

NoScript defaults to allowing this in Default and Trusted presets, and disallowing it in Untrusted preset.