Allow Youtube but need permissions in third-party sites

[ReporterX]

How could I configure it so it is allowed to load in Youtube, but asks for permission to embed/load in third-party sites?
There will be a placeholder on each youtube embedding (on third-party sites) and you need to click to allow it to load.

I know it has an "apply these restrictions to whitelist sites too" option.
But it applies globally. I only want it for some websites only.
Thanks a lot.

[barbaz]

Unfortunately, you're going to have to wait for NoScript 3 for that.
If you don't mind not having placeholders, you could use ABE like

Code: Select all

Site .youtube.com .ytimg.com .googlevideo.com
Accept from .youtube.com .ytimg.com .googlevideo.com
Deny INCLUSION(SCRIPT, OBJ, FONT, XHR, MEDIA, SUBDOC)
Sandbox

and add other domains to the Accept line as needed.

I know it has an "apply these restrictions to whitelist sites too" option.
But it applies globally. I only want it for some websites only.

about:config -> noscript.allowedMimeRegExp

[ReporterX]

Thanks for the reply.
Unfortunately what I want is "Ask per request" even in the same website that I would allow.
If I add the domain name to the "Accept from", it would be "Allow per site".

About noscript.allowedMimeRegExp, let's say I want to apply these restrictions to yahoo.com only (but not other whitelist sites).
What should I type? It does not seem like this pref could do this job.

[barbaz]

Thanks for the reply.
Unfortunately what I want is "Ask per request" even in the same website that I would allow.
If I add the domain name to the "Accept from", it would be "Allow per site".

That is what I answered wait until NoScript 3

If you don't allow scripts on the third-party websites, and check all Embeddings (not necessarily "Apply these restrictions to whitelisted sites too") then I think NoScript will default display placeholders for youtube embeddings. It's when scripts are allowed on the 3rd-party site that you're stuck with either not having this or "Apply these restrictions to whitelisted sites too".

About noscript.allowedMimeRegExp, let's say I want to apply these restrictions to yahoo.com only (but not other whitelist sites).
What should I type? It does not seem like this pref could do this job.

No, it can't act that way, because it's a whitelist of origin sites for plugin content, nothing to do with sites requesting the content.
Maybe ABE alongside that pref could do that, but again, I think the sort of feature you're looking for will likely be part of NoScript 3...

[Thrawn]

You could also try FlashBlock. Just bear in mind that it's not as reliable as NS for security purposes.

[ReporterX]

You could also try FlashBlock. Just bear in mind that it's not as reliable as NS for security purposes.

Thanks for your suggestion.

I see this line in the Flashblock page.

"Note: Flashblock does not work with Javascript disabled or with NoScript installed."

Too bad they are incompatible.
I prefer keeping NoScript.

[barbaz]

I suspect Flashblock would work as expected on script-allowed sites, which is the missing feature you're looking for.
(Note that IIRC it doesn't prevent things from being downloaded; it's basically pressing "Pause" as soon as it can, which isn't always immediately. Check Giorgio's blog for more details.)

[therube]

I haven't thought it through, but click-to-play settings need not necessarily coincide between Mozilla & NoScript, so perhaps something along that end?

[ReporterX]

I haven't thought it through, but click-to-play settings need not necessarily coincide between Mozilla & NoScript, so perhaps something along that end?

Do you mean the "plugins.click_to_play" pref?

It is true by default but it does not help.

Youtube will still load into the site (even though it isn't played automatically).