Newbie ABE learner
1. Must I need to use ^ sign to declare a regex URI pattern? In other words, any regex must start with ^ sign. True?
2. Could I use more than 1 method in the same rule, like what you can do with resource
3. Method: PING
A webserver can send PING request to us?
I thought PING request is sent by the user (to the webserver) to test the availability of the webserver.
What is the implication of privacy of security if I don't block it? Should we block it?
Thanks a lot.
Regex and Ping
Regex and Ping
Firefox 37.0.2, NoScript 2.6.9.22
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:32.0) Gecko/20100101 Firefox/32.0
Re: Regex and Ping
yes, at least in most cases. It's best to always do that.ReporterX wrote:1. Must I need to use ^ sign to declare a regex URI pattern? In other words, any regex must start with ^ sign. True?
YesReporterX wrote:2. Could I use more than 1 method in the same rule, like what you can do with resource
This PING isReporterX wrote:3. Method: PING
A webserver can send PING request to us?
I thought PING request is sent by the user (to the webserver) to test the availability of the webserver.
What is the implication of privacy of security if I don't block it? Should we block it?
Code: Select all
<a ping="...
I think it's blocked by default in the browser, so you don't need to worry about it.
*Always* check the changelogs BEFORE updating that important software!
Mozilla/5.0 (Windows NT 5.1; rv:32.0) Gecko/20100101 Firefox/32.0 SeaMonkey/2.29
Re: Regex and Ping
I tested it some time ago today.barbaz wrote:yes, at least in most cases. It's best to always do that.ReporterX wrote:1. Must I need to use ^ sign to declare a regex URI pattern? In other words, any regex must start with ^ sign. True?
It appears NoScript fails to recognize if I don't put ^ in front of the regex pattern.
Not that you have a choice. It is required.
I see.barbaz wrote:This PING isReporterX wrote:3. Method: PING
A webserver can send PING request to us?
I thought PING request is sent by the user (to the webserver) to test the availability of the webserver.
What is the implication of privacy of security if I don't block it? Should we block it?which will send the site(s) listed in the ping attribute, a short message saying that you clicked that hyperlink.Code: Select all
<a ping="...
I think it's blocked by default in the browser, so you don't need to worry about it.
Yup it seems to be. <a> ping request is ignored by default since 2008.
http://kb.mozillazine.org/Browser.send_pings
Thanks a lot.
Firefox 37.0.2, NoScript 2.6.9.22
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:32.0) Gecko/20100101 Firefox/32.0