Options: How to choose

Ask for help about NoScript, no registration needed to post
SafeTex

Options: How to choose

Post by SafeTex »

Hello

One more question please.

I've read: https://forums.informaction.com/viewtop ... =7&t=23974

and looked elsewhere but I can't find what it means in concrete terms to block or allow the options "script" "object", "media", "frame" "font" etc. etc. etc.

What is a good general setting for sites and why?

Thanks in advance for any help
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0
barbaz
Senior Member
Posts: 10834
Joined: Sat Aug 03, 2013 5:45 pm

Re: Options: How to choose

Post by barbaz »

[ Content of this post was moved to viewtopic.php?p=103816#p103816 ]
Last edited by barbaz on Mon Mar 29, 2021 6:20 pm, edited 7 times in total.
*Always* check the changelogs BEFORE updating that important software!
-
bo elam
Senior Member
Posts: 208
Joined: Sat Oct 14, 2017 2:25 am

Re: Options: How to choose

Post by bo elam »

SafeTex wrote:Hello
What is a good general setting for sites and why?
For me personally, I uncheck all boxes for Default and Untrusted, and tick all boxes for Trusted. That gives me a more restricted experience than I had with the old version. I remember I used to forbid WebGl for Trusted domains before and I am leaving it allowed now but even with that, the setup is pretty strong like I have it.

Bo
Mozilla/5.0 (Windows NT 10.0; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0
FranL
Senior Member
Posts: 84
Joined: Sun Dec 03, 2017 4:17 pm

Re: Options: How to choose

Post by FranL »

SafeTex wrote:What is a good general setting for sites and why?
I uncheck all checkboxes in the DEFAULT and UNTRUSTED presets. In the TRUSTED preset, I check every checkbox except WebGL. So few of the pages I visit use WebGL that I just prefer not to download such content unless I absolutely have to.
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0
LoneRanger1012
Posts: 7
Joined: Tue Nov 12, 2013 11:30 pm

Re: Options: How to choose

Post by LoneRanger1012 »

It appears that I can hover over the NoScript icon and see whether any items are being blocked by NoScript, and when trying to figure out what those are, it appears that if I select the Custom scope for a web address, the options that were found on that page are highlighted with a brown color. If those brown options are checked, they are not blocked, so whatever is blocked is somewhere else in the list. If this is a valid observation, how can I find the actual blocked items? Then, since I am not an expert in Internet Security, how can I figure out if it is dangerous to allow this particular item through?

Further, can I temporarily allow customized items?
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:25.0) Gecko/20100101 Firefox/25.0
barbaz
Senior Member
Posts: 10834
Joined: Sat Aug 03, 2013 5:45 pm

Re: Options: How to choose

Post by barbaz »

LoneRanger1012 wrote: Tue Jan 15, 2019 5:49 am it appears that if I select the Custom scope for a web address, the options that were found on that page are highlighted with a brown color. If those brown options are checked, they are not blocked, so whatever is blocked is somewhere else in the list. If this is a valid observation, how can I find the actual blocked items?
The brown highlight is only about network requests. So for example, if a site has only inline scripts, the brown highlight won't show up for "script" despite there being some blocked scripts.

There will always be some trial-and-error in finding what needs to be unblocked to get the functionality you want working.
LoneRanger1012 wrote: Tue Jan 15, 2019 5:49 am since I am not an expert in Internet Security, how can I figure out if it is dangerous to allow this particular item through?
FAQ 1.11
viewtopic.php?p=75314#p75314
LoneRanger1012 wrote: Tue Jan 15, 2019 5:49 am Further, can I temporarily allow customized items?
Sure, just click the clock at the right of the "Custom" label. (It will revert to Default when the temporary permission expires.)
*Always* check the changelogs BEFORE updating that important software!
Mozilla/5.0 (X11; Linux x86_64; rv:56.0; Waterfox) Gecko/20100101 Firefox/56.2.6
san

Re: Options: How to choose

Post by san »

Hello,

What would be, for the default NoScript permissions, the equivalent of uMatrix (which by default allows CSS and images)

It's true that understanding NoScript's permissions definition could be a great help for everyone, so I'd like to ask Mr. Maone if he could add on the permissions page in the NoScript preferences, a clear and precise explanation of what those permissions represent.

Many thanks in advance.
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.114 Safari/537.36
barbaz
Senior Member
Posts: 10834
Joined: Sat Aug 03, 2013 5:45 pm

Re: Options: How to choose

Post by barbaz »

san wrote: Tue Apr 21, 2020 8:02 am What would be, for the default NoScript permissions, the equivalent of uMatrix (which by default allows CSS and images)
There is no exact equivalent. NoScript and µMatrix have different purposes, different functionality.

Probably the closest to µMatrix default configuration would be:
- un-checking everything except "font" under DEFAULT preset, and
- checking "Temporarily set top-level sites to TRUSTED".

NoScript does not restrict images or CSS stylesheets, and µMatrix does not block remote fonts by default.
*Always* check the changelogs BEFORE updating that important software!
-
san

Re: Options: How to choose

Post by san »

Thanks for the explanation, Barbaz, I understand Noscript better now. :D

"Temporarily set top-level sites to TRUSTED" checked suits me better, and as a result, will greatly lighten my list of sites checked as TRUSTED, will only remain necessary custom permissions for third party resources, a bit like uMatrix after all but Noscript is faster to use to me.
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.114 Safari/537.36
Post Reply