Settings on a per site basis

[rihad]

Just the subj. That would be a very worthwhile update. Sometimes I want to disable flash animations on some greedy forum, but still allow javascript needed for attachments etc. It's a nuisance to always temporarily whitelist the site, do the thing, and revoke the permissions.

[Giorgio Maone]

Not sure about what you're meaning here.
Is the Flash animation from an external site (e.g. an advertising network)?
If so, even if you permanently allow the forum, the Flash animation shouldn't be shown.
At any rate, you may want to try NoScript Options|Embeddings|Apply these restrictions to whitelisted sites as well.
This may help too.

[rihad]

Not sure about what you're meaning here.
Is the Flash animation from an external site (e.g. an advertising network)?
If so, even if you permanently allow the forum, the Flash animation shouldn't be shown.

Yup. It is shown. This is the forum I was talking about. It is mostly in Russian, but you can get the idea. Try allowing all temporarily and watch the flash come to live and bring your pc to its knees. Hate that.

At any rate, you may want to try NoScript Options|Embeddings|Apply these restrictions to whitelisted sites as well.
This may help too.

Including all whitelisted sites is too global to be useful, but the ABE thing looks just what I wanted, thanks. So, how would I go about trusting everything except flash on a site? Something like

Site *.disput.az
Deny FLASH
Accept

(just making that up).

[Giorgio Maone]

The Flash objects actually seem to come all from "turbo.az", therefore allowing just "disput.az" should not make them work.

Including all whitelisted sites is too global to be useful, but the ABE thing looks just what I wanted, thanks. So, how would I go about trusting everything except flash on a site? Something like

It's more useful and usable than you may think: you'll get the "FlashBlock" effect, i.e. you will be shown placeholders for Flash stuff which you can click to start.

However, this rule would make ABE block any Flash on that site and from those domains:

Code: Select all

# This blocks Flash and other plugin objects served by dispute.az, turbo.az and subdomains 
Site .dispute.az .turbo.az
Deny INC(OBJ)

# This blocks Flash and other plugin objects embedded in dispute.az pages
Site *
Deny INC(OBJ) from .dispute.az

[rihad]

However, this rule would make ABE block any Flash on that site and from those domains:

Code: Select all

# This blocks Flash and other plugin objects served by dispute.az, turbo.az and subdomains 
Site .dispute.az .turbo.az
Deny INC(OBJ)

# This blocks Flash and other plugin objects embedded in dispute.az pages
Site *
Deny INC(OBJ) from .dispute.az

Thank you so much, I didn't know NoScript cared where the objects came from, as long as they are on this site. Now everything's just how I wanted: everything allowed except plugins such as Flash.

It's more useful and usable than you may think: you'll get the "FlashBlock" effect, i.e. you will be shown placeholders for Flash stuff which you can click to start.

You mean "applying these restrictions to whitelisted sites also"? So, with that option selected, the only thing NoScript allows for whiltelisted sites is JavaScript (and probably does some anti-CSRF)?

[Giorgio Maone]

You mean "applying these restrictions to whitelisted sites also"? So, with that option selected, the only thing NoScript allows for whiltelisted sites is JavaScript (and probably does some anti-CSRF)?

Correct. By "these restrictions", NoScript means those listed on that panel, i.e. embedding restrictions (Java, Flash, Silverlight, other plugins and possibly Frames and embeddable fonts).

[rihad]

Okay, I disabled the USER ABE rules, but checked Apply these restrictions to whitelisted sites too, other settings remaining as they were. Then I allowed disput.az permanently, reloaded, and everything is as expected! I'm in the habit of simply clicking "temporarily allow all this page" when needed, instead of figuring out which sites to pick from the many, and when done using "revoke temporary permissions". This unfortunately allowed Flash objects in the meantime, which the checkbox above now blocks no matter what I allow. Thank you again.