NS 2.6.9.7: noscript.allowWhitelistUpdate

[Loxley]

Hi,

I updated to NoScript 2.6.9.7 and have a tiny question on the following change:

+ noscript.allowWhitelistUpdate preference to control whether
NoScript should be able to tweak the whitelist on version
updates when the 3rd party requirements for an already
whitelisted website change (thanks Thencent for RFE)

Let's say I removed all default whitelisted items save the grey ones, and I don't intend to add any permanent item in the future. Could a NoScript update change my whitelist ? Do I need to set noscript.allowWhitelistUpdate to false to ensure it doesn't ?

It's surprising that this pref is true by default because NoScript doesn't have a history of overriding user preferences, so I'd just like to confirm.

Thanks!

[barbaz]

viewtopic.php?p=73373#p73373

[Loxley]

Ok, so NoScript has always been adding new things to the permanent whitelist even if the user had already customized it through the UI ? I never noticed, and I'm a very long time user with an empty whitelist.

I thought NS only updated the default whitelist setting without touching customs, aside from adding grey items such as about:*.

So if leaving this new noscript.allowWhitelistUpdate alone is the way to keep previous behaviour intact, then I can leave it alone and trust NoScript. Thanks!

[Loxley]

Just to make double sure in case I end up setting noscript.allowWhitelistUpdate to false, will it still update grey items as new about:* and similar pages are added to Firefox ?

Like Thencent suggested in your thread.

[barbaz]

Ok, so NoScript has always been adding new things to the permanent whitelist even if the user had already customized it through the UI ? I never noticed, and I'm a very long time user with an empty whitelist.

Your empty whitelist is likely why you haven't noticed, as what gets automatically added/changed for existing users is only new dependencies for sites already in the default whitelist that the user chose to keep there.

Just to make double sure in case I end up setting noscript.allowWhitelistUpdate to false, will it still update grey items as new about:* and similar pages are added to Firefox ?

I believe that is done separately by modifying the noscript.mandatory pref, so if you haven't changed noscript.mandatory you should still get those updates regardless.

[Loxley]

Ok, thanks again for the precisions. That dependency updating mechanism is actually a good feature considering Giorgio can be trusted not to add crap - Surrogates would cover that part. I'm leaving it on in case I ever start having permanent items on the whitelist.