Untrusted sites still displaying content

[JAFO]

Have recently noticed that content from flagged (Untrusted) sites are being displayed with a small NS logo in its bottom center.
If this is intentional, ok... but how to remove it all together? site marked untrusted should NEVER display content.

Firefox 40.0.2
NS 2.6.9.35

[barbaz]

untrusted does not mean don't load anything from this domain, it means basically the same thing as just forbidden... only difference is that it takes precedence over the allowed state & a few more restrictions on the things *already* blocked can be applied.

if you want to block everything from a domain, you can either use ABE, or (if you want a better user interface) install some other extension designed for that, such as Policeman

anyway, I think the toggle you are looking for is
noscript options > advanced > untrusted > attempt to fix javascript links

[JAFO]

This is a distinction that was not previously effected, and this change is not as "secure" as it was or should be. In the past, content (such as advertisements) from an Untrusted site was completely blocked.

Also, noscript options > advanced > untrusted > attempt to fix javascript links has no effect on the issue.

The need to take extra steps for what was once a simple process is not user friendly.

[therube]

Where does this happen?

There is no reason that an Untrusted site could not display content.

Everything would typically block JavaScript from an external site from running, not code from an external site, in general (as in that external site may not require JavaScript for its operation, ad displaying or whatever - as untypical as that may be).

[barbaz]

Also, noscript options > advanced > untrusted > attempt to fix javascript links has no effect on the issue.

So it's not a NS logo and a bunch of links?
Then can you please explain more, maybe with a screenshot and URL?

The need to take extra steps for what was once a simple process is not user friendly.

Again, it has never been the way you are saying it was. A few people have requested that feature before (& I think it could be a really nice option to have for some setups), but it's somewhat moot atm since Thrawn is writing an addon that will allow you to leverage NoScript's ABE for that purpose.

[Thrawn]

The need to take extra steps for what was once a simple process is not user friendly.

Again, it has never been the way you are saying it was.

Agreed, NoScript has only ever targeted active content, not mere images or stylesheets. Unless you use ABE.

Google Analytics is the one exception, where if you mark it as untrusted, everything gets blocked (to stop web bugs).

it's somewhat moot atm since Thrawn is writing an addon that will allow you to leverage NoScript's ABE for that purpose.

No development lately...but we're about to move into our new house, so maybe I'll be able to get back to it!

It would likely be more efficient anyway to have the 'block *everything* from untrusted sites' option in the core.

[JAFO]

TBH, I have not seen it since, and I have been too busy to check back here until now.

When I saw this happen, it was an advertisement on speedtest.net, for Verizon, that was sourced from exoclick.com. Normally I love using the combination of NS & ST because ST is so rife with advertisements these days that it slows down the page load to even begin the test, let alone run it without talking ads starting up.

In the past, whatever site I had marked as untrusted would simply display a small NS logo in place of that sites content. The complaint is that either NS has been significantly changed in the way it blocks content, or NS is loosing ground to new changes in the way they are delivering content, and I may need a new method of warding it off.

[barbaz]

In the past, whatever site I had marked as untrusted would simply display a small NS logo in place of that sites content.

So that's either an embedding placeholder or the attempt to fix javascript links. Most likely it's blocked Flash.

Possibly these sites are transitioning to HTML5 & in the process getting "better" scriptless fallbacks.
If you see it again, please:
- Post here a screenshot
- Inspect the element (if possible, the entire Untrusted site's content, not the NS logo in the page) with Firefox's builtin dev tools & post here the HTML

[JAFO]

as requested

[barbaz]

Yeah, it's blocked Flash.
See what does NoScript Options > Embeddings > No placeholder for objects coming from sites marked as untrusted