Reducing double-handling with RequestPolicy

Bug reports and enhancement requests
Post Reply
User avatar
Thrawn
Master Bug Buster
Posts: 3106
Joined: Mon Jan 16, 2012 3:46 am
Location: Australia
Contact:

Reducing double-handling with RequestPolicy

Post by Thrawn »

When using NoScript with RequestPolicy, there's a lot of double-handling; third-party sites have to be whitelisted in both places.

This is by design, of course, but it would be helpful if we could think of a way to reduce it. The thing is, if you're running RP, then you don't really need NS to block third-party scripts.

Maybe NS could have a a mode where, if the top-level site is whitelisted, then all third-party scripts are allowed while on that site, on the assumption that RP will manage them. Kind of the opposite of 'Temporarily allow top-level sites by default'. This would be similar to the Host Permissions (or Tab Permissions) addon behavior, but managed via NoScript (which is more reliable and less quirky - and the whole point of this is to reduce double-handling, so you don't want to use those addons alongside NS).

Ideally, this would not involving whitelisting those sites, so if you later visit them as first-party sites, they're blocked, and if you change back to the default mode, you don't have to revoke any permissions. But that's not critical.

Anyone's thoughts? Any other potential approaches?
======
Thrawn
------------
Religion is not the opium of the masses. Daily life is the opium of the masses.

True religion, which dares to acknowledge death and challenge the way we live, is an attempt to wake up.
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:23.0) Gecko/20100101 Firefox/23.0
User avatar
GµårÐïåñ
Lieutenant Colonel
Posts: 3370
Joined: Fri Mar 20, 2009 5:19 am
Location: PST - USA
Contact:

Re: Reducing double-handling with RequestPolicy

Post by GµårÐïåñ »

To be honest, I have always found the redundancy to be refreshing and keep security intervention proactive. I guess I am a glutton for punishment or a masochist, not sure. But the new version of RP, although I hate the interface, is much more relaxed in its absolutes, so that might be the useful compromise.
~.:[ Lï£ê ï§ å Lêmðñ åñÐ Ì Wåñ† M¥ Mðñê¥ ßå¢k ]:.~
________________ .: [ Major Mike's ] :. ________________
Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.1.0.0 Safari/537.36
klepto
Posts: 2
Joined: Wed Feb 27, 2013 3:30 am

Re: Reducing double-handling with RequestPolicy

Post by klepto »

I use both as the RP 1.0 beta is very nice but I'm not sure if both together is a hinderance to each other. I hope they play nice with each other and strengthens Firefox's security.
Mozilla/5.0 (X11; Linux x86_64; rv:27.0) Gecko/20100101 Firefox/27.0
Post Reply