I came across an old extension that claimed to only allow certain scripts when 1st party. Request Policy:
https://addons.mozilla.org/en-US/firefo ... rm=windows
In my testing, it did not work as advertised, nor did its settings appear to work either.
Are there plans to incorporate this level of complexity into NoScript? Or maybe something similar?
For example, if I go to facebook.com, I'd like to run scripts from facebook.com in that tab. However, I don't want to run facebook.com scripts in any other tab in case Facebook is tracking what I am doing. Similar for Amazon, Google, Microsoft, but applies to any- and everyone else.
Is there a way to limit scripts to 1st part only?
-
nozzleberries34534523452345
Is there a way to limit scripts to 1st part only?
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:49.0) Gecko/20100101 Firefox/49.0
Re: Is there a way to limit scripts to 1st part only?
RequestPolicy is dead. Try this one - https://addons.mozilla.org/addon/reques ... continued/nozzleberries34534523452345 wrote:I came across an old extension that claimed to only allow certain scripts when 1st party. Request Policy
(I haven't used it myself, I prefer µMatrix)
I believe this is planned for NoScript 3.nozzleberries34534523452345 wrote:For example, if I go to facebook.com, I'd like to run scripts from facebook.com in that tab. However, I don't want to run facebook.com scripts in any other tab in case Facebook is tracking what I am doing. Similar for Amazon, Google, Microsoft, but applies to any- and everyone else.
In the mean time, you can achieve this for individual sites with ABE. Since your concern is tracking, this is what it would look like for facebook:
Code: Select all
Site ^[0-9A-Za-z-]+://(?:[^/:]+\.)?(?:facebook|fbcdn|insta(?:gram)?|fb[^/:]*-a\.akamaihd)\.[0-9A-Za-z]+[^0-9A-Za-z_\.%-] .fb.me
Accept from .facebook.com .facebook.net .fbcdn.net .akamaihd.net .instagram.com .insta.me
Deny INC(SCRIPT, OBJ, FONT, XHR, MEDIA)
Sandbox*Always* check the changelogs BEFORE updating that important software!
-