RFE: default whitelist about:accounts for Firefox Sync

[sourcejedi]

I just installed a fresh Firefox set up with NoScript, and the new version of Firefox Sync.

Clicking "sign in" in the sync preferences pane opened a new tab which simply showed "Firefox Accounts requires javascript". Unfortunately I had to manually whitelist the following:

about:accounts
firefox.com

Currently, installing NoScript whitelists the domains for Google and Microsoft (Passport) accounts, various about: pages (which provide key parts of the Firefox interface), and addons.mozilla.org. Obviously this default whitelist needs updating include about:accounts and the domain for the new "Firefox Account".

Thanks
Alan

[sourcejedi]

about:accounts is still not whitelisted .

[barbaz]

@sourcejedi It's ok to bump your thread on the timescale of months instead of waiting years

[Thrawn]

I'm not convinced that that should be on the default whitelist. Is it really necessary? You can just manually allow it if you want it, right?

The original premise of the default whitelist was to allow webmail, so if someone is hopelessly stuck, they can still contact Giorgio for help.

[barbaz]

I'm not convinced that that should be on the default whitelist. Is it really necessary?

Yes, per the OP (emphasis mine) -

Clicking "sign in" in the sync preferences pane opened a new tab which simply showed "Firefox Accounts requires javascript". Unfortunately I *had to* manually whitelist the following:

about:accounts
firefox.com

Sure, this stuff is currently Firefox-specific, but Giorgio has already solved that problem. And remember that he put Pocket on the default whitelist. That is far more dubious than Sync.

No reason not to default-whitelist about:accounts in Firefox.


As for firefox.com, I'd say it's about as trustworthy as the already-default-whitelisted addons.mozilla.org and mozilla.net, so default-whitelisting that site even in other browsers wouldn't be a big deal.