[RESOLVED]NoScript doesn't give option to forbid single scri

[pg-extra]

Greetings all.

I am using NoScript version 2.6.9.4 on Tor Browser 4.0.1.
Up to now, when I visited a website, NoScript gave a list of scripts that I could individually choose to allow or forbid. But since lately, I only have 2 options :
- Temporarily allow all this page
- Allow Scripts Globally

What can I do to get back the option of choosing to enable/disable individual scripts ? Another problem is that Tor Browser resets all settings on startup.

Thank you and kind regards,
pg

[barbaz]

NoScript Options > Advanced > Trusted > un-check Cascade top-document's permissions... ?

[pg-extra]

Thank you for your answer, but it doesn't change anything, although it should. I suppose it's more of a Tor problem than NoScript problem then. :/

[Thrawn]

NoScript Options > Advanced > Trusted > un-check Cascade top-document's permissions... ?

That wouldn't explain the 'Temporarily allow all this page' option...

I'm not sure exactly how Tor Browser is configured, but I do know that it focuses on privacy over security (which was actually the motivation for the Cascade Permissions feature; it stops sites from fingerprinting your whitelist).

What settings do you have in Options-Advanced-HTTPS-Permissions?

[barbaz]

What is checked in NoScript Options > Appearance ?

[pg-extra]

Thank you for answers.

@Thrawn - the settings in Options-Advanced-HTTPS-Permissions are :
- Forbid active web content unless ..... = Never
- Allow HTTPS scripts globally ... = unchecked

@barbaz - options checked in Appearance are :
- Contextual menu
- Allow scripts globally
- About NoScript
- Blocked Objects
- Temporarily allow all this page
- Revoke temporary permissions

[barbaz]

@barbaz - options checked in Appearance are :
- Contextual menu
- Allow scripts globally
- About NoScript
- Blocked Objects
- Temporarily allow all this page
- Revoke temporary permissions

That explains it. You need to check:
"Allow [...]"
"Temporarily allow [...]"
"Mark [...] as Untrusted"
"Untrusted"
Your preferred combination of "Base 2nd-level domains", "Full domains" & "Full addresses" (at least one of those needs to be checked)

That should get you a more reasonable looking NoScript menu

[pg-extra]

That was it barbaz, thank you very much ! I didn't think these kind of settings could change so much just with a new version of Tor browser. Keep up the great work at the forum, thank you again

[Thrawn]

I didn't think these kind of settings could change so much just with a new version of Tor browser.

Ah. That comes back to what was said about Tor focusing on privacy over security. As soon as you start whitelisting individual sites, then your whitelist becomes specific to you, and it's possible in theory for a site to detect which ones are blocked. So the Tor folks prefer to use a 'whitelist/blacklist all' approach.