Allow sites opened through bookmarks - broken?

[Sealord]

NoScript 2.5.8 Firefix 16.0.1
Basically running NoScript default settings with my own whitelist. Allow sites opened through bookmarks, selected.
If I open a bookmarked site from the pull down bookmarks menu, the site will still have the main script for that site blocked. Unless I add
it to the whitelist. Is this just me or is it a general problem?

[therube]

Something is going on, just not sure what?

Perhaps sites opened through bookmarks are being set as Allowed (not Temporarily), Full Address.
I'd expect they'd only be Temporarily Allowed.

And then http://www.mozilla.com/ was not being allowed when opened from a bookmark?
But other sites were?

OK, the mozilla.com kind of makes sense as it looks to actually roll over to mozilla.org.


So ... other then being set as Allowed, permanently, which I think is wrong, it looks to be working.

[Sealord]

by therube » Tue Oct 23, 2012 2:14 pm
...it looks to be working

OK. So having seen your comment that it seems to be working, I checked here to see what could be wrong. Seems in my bookmarks I had not included www for the address that I bookmarked. Firefox took me to the address just fine. NoScript was not happy without the www, and disallowed the script even though 'Allow sites opened through bookmarks' is selected.

I see that when sites are opened this way, that they get whitelisted automatically.

[Thrawn]

NoScript was not happy without the www, and disallowed the script even though 'Allow sites opened through bookmarks' is selected.

That's because 'example.com' is not necessarily the same as 'www.example.com', so whitelisting one does not automatically whitelist the other.

You don't normally notice this when using the menu to whitelist sites, because NoScript's default configuration is to whitelist by base domains (eg example.com). Mine, on the other hand, is configured to use full addresses (eg http://www.example.com). Sounds like the 'allow sites opened through bookmarks' feature is specific to the exact domain or exact address.

[therube]

I've never used Allow sites opened through bookmarks, but IMO it should not Allow, but only Temporarily allow.
Now I've certainly known the option to exist, but never would have expected the behavior that it uses.

[Thrawn]

I've never used Allow sites opened through bookmarks, but IMO it should not Allow, but only Temporarily allow.
Now I've certainly known the option to exist, but never would have expected the behavior that it uses.

Yeah, it's never suited my usage pattern, either...I don't necessarily trust every site that I bookmark (some are just articles that I might want to reread), and it's often faster to manually whitelist something than to whitelist it by bookmarking it. If the permissions were temporary, then that would make more sense, for the uber-paranoid user who never wants to give permanent permissions to anything. I'm sure Giorgio knows why it was added.