NoScript unable to block dynamic src?

[apam.smh]

Is there a configuration option to disable this, or is NoScript unable to prevent execution of dynamic sources?

http://www.smh.com.au/text

Despite having the whole site blocked, it still managers to execute a script with
src="#staticUrl()/js/behave.js"

which is served off the same host.

Any ideas?

[Thrawn]

NoScript should be able to block any kind of script. What symptoms are you seeing to tell you that this script is running? With the top-level site blocked, I don't see anything on that page that appears to be dynamic, just a list of plain headings and hyperlinks.

Please give details; if there really is a way to bypass NoScript, then I guarantee Giorgio will jump on it as top priority.

[therube]

Code: Select all

<script type="text/javascript" src="#staticUrl()/js/behave.js"></script>

If com.au (actually it looks like smh.com.au) is not allowed, seemingly nothing should be running?

Inline scripts are blocked by default on non-whitelisted sites.
You cannot disable them selectively on whitelisted sites, if that's what you're asking for, but you can modify their execution environment to "cripple" them or otherwise change their behavior by writing your own page-level script surrogates.

http://forums.informaction.com/viewtopi ... 936#p34936

Inline Script Blockage