Possible bugs?

[Guezzt]

Hello, I am using the latest Aurora build 7.0a2 on WS 2008 R2 (x64). I am seeing the following strange behavior:

1. I have 'Automatically reload affected pages when permissions change' enabled. Unfortunately, all my pages seem to reload. So for example, I have hotmail, youtube and justin.tv in my tabs. On my justin.tv tab, jtvnw.net is disabled by default. When I temporarily enable it, all three tabs reload. Is this a bug or am I doing something wrong?

2. I have 'Temporarily allow top-level sites by default' enabled with the 'base 2nd level Domains' option. When checking hotmail, it should allow live.com by default. But sometimes, full script blocking is enabled, and I see the 'Allow https://snt124.mail.live.com/' option.

3. The temporarily allowed sites don't get removed from the whitelist even when I close the page. They persist until I end the Firefox session. Shouldn't they be removed if they are not in use on any open tab?

Thank you all for your hard work; this is such a great extension.

[Guezzt]

Anyone?

[Giorgio Maone]

1. I have 'Automatically reload affected pages when permissions change' enabled. Unfortunately, all my pages seem to reload. So for example, I have hotmail, youtube and justin.tv in my tabs. On my justin.tv tab, jtvnw.net is disabled by default. When I temporarily enable it, all three tabs reload. Is this a bug or am I doing something wrong?

Looks like a bug, investigating.

2. I have 'Temporarily allow top-level sites by default' enabled with the 'base 2nd level Domains' option. When checking hotmail, it should allow live.com by default. But sometimes, full script blocking is enabled, and I see the 'Allow https://snt124.mail.live.com/' option.

Does it happen in the middle of the session, or immediately as you log in?

3. The temporarily allowed sites don't get removed from the whitelist even when I close the page. They persist until I end the Firefox session. Shouldn't they be removed if they are not in use on any open tab?

The current meaning of "temporary" throughout all the NoScript features is "until the end of the session" or until you explicitly revoke them, and I can't see a compelling reason for breaking this assumption so late in the game.

[Guezzt]

Thank you for your reply!

#2: It happens as soon as I log in. Maybe because I modify the default whitelist to exclude ALL external domains (and just leave the about:, chrome: and resource: stuff in). Then, I manually temporarily allow 'wlxrs.com'.

#3: Would it be possible to give an option to make it 'truly' temporary for us paranoid folk? Just to give you a simple example, say I allow google.com when I am on Google Search, but I don't want it allowed on other sites (because it is not the actual top-level site).

Since I am on the subject of enhancements/FRs, is it hard (and do you see a compelling security/privacy-related reason) to enable site-specific rules? For example, I want to temporarily allow ytimg.com only when I am on youtube.com, but not otherwise.

Thanks again Giorgio!

[Giorgio Maone]

#3: Would it be possible to give an option to make it 'truly' temporary for us paranoid folk? Just to give you a simple example, say I allow google.com when I am on Google Search, but I don't want it allowed on other sites (because it is not the actual top-level site).

Since I am on the subject of enhancements/FRs, is it hard (and do you see a compelling security/privacy-related reason) to enable site-specific rules? For example, I want to temporarily allow ytimg.com only when I am on youtube.com, but not otherwise.

http://noscript.net/faq#qa8_10

[Guezzt]

http://noscript.net/faq#qa8_10

Thank you!

Were you able to confirm #1 as a bug? I have moved to the Nightly channel and the behavior is the same... unaffected tabs seem to reload when permissions change.

[Guezzt]

Well, here's proof of the Hotmail issue.