Whitelist a site on anther site's domain?

[Guest]

I play an online alternative reality game and, as part of the game, I need to allow twitter to run scripts. What I want to know is whether it's possible to set NoScript up so that I can allow twitter to run scripts, but only on the game's website?

I looked in the FAQ, etc. and poked around the options, but can't see any way to do this.

[therube]

ABE.
http://noscript.net/abe/

[Guest]

I don't understand what I'd have to put in there to allow it.

[Giorgio Maone]

http://noscript.net/faq#qa8_10

[Guest]

Thanks, I don't know how I missed that.

[Guest]

That hasn't helped, actually. Based on the FAQ, I've put the following in in the "USER" bit of ABE:

# twitter.com rule
Site .twitter.com
# the above is shortcut for twitter.com *.twitter.com
Accept from .extrasolar.com
Deny

Yet, having just rebooted my computer and visited ExtraSolar, I've found that twitter is still blocked.

[barbaz]

whitelist twitter.com and try only this rule

Code: Select all

Site .twitter.com
Accept INCLUSION from .twitter.com .extrasolar.com
Deny INCLUSION(SCRIPT, OBJ, FONT, XHR)
Sandbox

which better emulates script blocking and also allows twitter scripts called by extrasolar, to call other twitter scripts

[Guest]

I realise that this is almost certainly me not understanding the language properly, but wouldn't doing what you suggest whitelist twitter everywhere?

[barbaz]

no, ABE is independent from regular script blocking permissions

[Guest]

Then how do I whitelist twitter in ABE but not NoScript generally? I don't see any option for that.

[therube]

That is just what you want to do.
You do want to Allow twitter.com in NoScript.
And then its reach is constrained by your ABE settings.

[Thrawn]

Trying to use ABE while also leaving the site script-blocked
is like trying to use NoScript while you have JavaScript completely disabled.

You need to script-allow the site to manage it in ABE.

[awesomepikachu]

Hello everybody

I want something similar to the OP. Please read the rules I have to see if they are correct for what I want to achieve. That is to run certain scripts from a third party website, BUT only if I am on a specific website of my choosing.

So if I am on beeminder.com, then I want to allow the script ajax.googleapis.com to run. But I NEVER want jQuery (ajax.googleapis.com script) to run otherwise on any other website.

Site .beeminder.com
Accept INCLUSION from SELF++
Accept INCLUSION from .ajax.googleapis.com
Deny

with ajax.googleapis.com whitelisted.

Now.... How to check and be sure that ajax.googleapis.com isn't functioning on other websites? Since it is whitelisted it looks like it is running. How do I troubleshoot this? How do I tell that ABE is doing its job properly?

[awesomepikachu]

Think I got the syntax backwards there ^

I tried whitelisting ajax.googleapis.com, then limiting its use to stackexchange as an experiment.

However another website using the ajax.googleapis.com script still runs the jQuery code, which wasn't the plan under ABE blocking other websites from using that script.

Maybe I'm mistaken, but shouldn't this work?

Site .ajax.googleapis.com
Accept INCLUSION from SELF++
Accept INCLUSION from .stackexchange.com
Deny

[Giorgio Maone]

So if I am on beeminder.com, then I want to allow the script ajax.googleapis.com to run. But I NEVER want jQuery (ajax.googleapis.com script) to run otherwise on any other website.

Site .beeminder.com
Accept INCLUSION from SELF++
Accept INCLUSION from .ajax.googleapis.com
Deny

Nope, you got it reversed.

You must specify what ABE must do with requsests towards ajax.googleapis.com, depending if they're initiate from .beeminder.com or not, so

Code: Select all

Site .ajax.googleapis.com
Accept INCLUSION from .beeminder.com
Deny

with ajax.googleapis.com whitelisted.

This part is correct.