Related extensions

[jago25_98]

Javascript is very ubiquitous now of course.
Disabling Javascript completely is great, but what happens when you get to a site forces you to enable Javascript to continue. Then you have a dilemma. Really at that point what you need to do is go through the source and read to see what the code is doing but I'm sure even then there are possibly ways to hide a cross site scripting attack.

Browsing with Javascript off with Noscript and then enabling when we feel it is safe is the best solution we have so far. It's not ideal though. I wonder if noscript can be used with anything else to help the situation.

What if there was something that monitors and informs what is going on?
I wonder what other plugins could help us know what javascript is doing while we browse and approve or disapprove the individual actions the Javascript wants to do. This is ambitious.

Another way of looking at it could be sandboxing each site somehow and then showing what is flowing between the sites.
(see http://forums.informaction.com/viewtopi ... ing#p13639 )

I found RequestPolicy & RefControl. Although this is the first time I've looked into it I'll bet this has probably been discussed before. Is there anything else I can search for to find more information?

Personally I take a exclude none, blacklist when cautious approach which puts me at risk. I know I should be browsing with blacklist all, whitelist when needed, and in a sandboxed browser,

but if you're browsing at the speed I do with 10-20 tabs open and browsing on shared machines with Firefox portable that's just too far.

I think this subject is just going to get bigger and bigger and Noscript is just the start. Let's say I use the Facebook login for forums, it would be great if I could quickly and intuitively see what is happening in the background. To see that packet going to facebook.com, for example.

How would that be visualised though? What if there way a line drawn away from the element on the page to somewhere else on the browser that shows the url?

Another thing that might help us is a hive knowledge of sites easily available.

Thoughts?