[RESOLVED] Some security with "Allow Scripts Globally"

General discussion about the NoScript extension for Firefox
Post Reply
???
Posts: 11
Joined: Tue Nov 10, 2009 3:47 am

[RESOLVED] Some security with "Allow Scripts Globally"

Post by ??? » Fri Nov 13, 2009 4:00 am

Posting this here because: is it a support question or a feature request question?? (depends on the answer!)

Installed NoScript on a relative's new computer and she can't handle it. No patience. She wants to surf with no effort on her part. It's really looking like I may have to allow scripts globally (ack!) in order to at least keep the *other* NoScript protections in place. So here's the question: is there any way to allow scripts globally EXCEPT for sites listed as untrusted? Already have a large number of untrusted along the lines of google analytics -- sites that there's no way she will ever have cause to make trusted (especially with the NoScript surrogate scripts)--and it would be really great to have a way to keep these sites' locked up even while opening up the rest of the web to, well, whatever…
Last edited by Tom T. on Sun Dec 06, 2009 5:37 am, edited 1 time in total.
Reason: resolved
Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5

Alan Baxter
Ambassador
Posts: 1586
Joined: Fri Mar 20, 2009 4:47 am
Location: Colorado, USA

Re: Some security with "Allow Scripts Globally"

Post by Alan Baxter » Fri Nov 13, 2009 5:09 am

If I recall correctly, sites marked untrusted aren't allowed even in Globally Allowed mode. It should be easy for you to check.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5

User avatar
Giorgio Maone
Site Admin
Posts: 8732
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: Some security with "Allow Scripts Globally"

Post by Giorgio Maone » Fri Nov 13, 2009 8:27 am

Yes, when you use "Allow scripts globally", whatever you forbid from then on is automatically marked as untrusted and prevented from running.
In other words, you go in "Blacklist Mode". It's like YesScript, but with much more protection features (anti-XSS, anti-Clickjacking, ABE and so on).
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)

???
Posts: 11
Joined: Tue Nov 10, 2009 3:47 am

Re: Some security with "Allow Scripts Globally"

Post by ??? » Fri Dec 04, 2009 8:46 pm

Thanks!
Sorry it took so long to respond...
Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5

Post Reply