Page 2 of 2
Re: How to permanently allow blocked objects?
Posted: Thu Jun 09, 2016 11:30 pm
by barbaz
kukla wrote:And a little late, but one more thing: I have never really understood what "objects" are. I know the Blocked Objects sub-menu wasn't there years ago, when I first started using NS. Perhaps you can direct me to something to read about this (not finding anything), or offer a quick explanation.
This info should all be in the link I posted above noscript.allowedMimeRegExp
kukla wrote:In addition, referring to my screenshot, above, can you explain why there are so many different versions of what appear to be the same FONT object.
Blocked Objects above the separator(s) (on the very top of the menu) are individual objects. Blocked Objects below the separator(s) blanket-Temp-Allow any objects based on origin (and, optionally, request origin and/or MIME type).
kukla wrote:And sometimes, even if I allow a particular object, when the page reloads the exact same one will reappear, as if it had never been allowed.
No idea there I'll do some testing and get back to you.
Re: How to permanently allow blocked objects?
Posted: Fri Jun 10, 2016 12:50 am
by barbaz
barbaz wrote:kukla wrote:And sometimes, even if I allow a particular object, when the page reloads the exact same one will reappear, as if it had never been allowed.
No idea there I'll do some testing and get back to you.
Wait which page is this? Some pages (e.g. Youtube) have objects with dynamic URLs, that's one possible cause...
Re: How to permanently allow blocked objects?
Posted: Fri Jun 10, 2016 8:44 pm
by kukla
I pretty much understand the explanation of objects in the linked passage. But no idea what this really means: difference between "individual objects" and "objects based on origin"
Blocked Objects above the separator(s) (on the very top of the menu) are individual objects. Blocked Objects below the separator(s) blanket-Temp-Allow any objects based on origin (and, optionally, request origin and/or MIME type).
But please don't knock yourself out trying to explain it, I probably just don't have the necessary grounding to get anywhere with it.
As for my question why some objects re-appear even though they've been allowed, as soon as I encounter a site that demonstrates that I'll get back to you with the URL.
Basically, I usually don't allow any .swf or Flash objects. But never sure when allowing a FONT object is really needed or potentially malicious if allowed.
Re: How to permanently allow blocked objects?
Posted: Fri Jun 10, 2016 11:30 pm
by barbaz
kukla wrote:I pretty much understand the explanation of objects in the linked passage. But no idea what this really means: difference between "individual objects" and "objects based on origin"
Blocked Objects above the separator(s) (on the very top of the menu) are individual objects. Blocked Objects below the separator(s) blanket-Temp-Allow any objects based on origin (and, optionally, request origin and/or MIME type).
But please don't knock yourself out trying to explain it, I probably just don't have the necessary grounding to get anywhere with it.
It's not hard to explain, and you have more than the necessary grounding to understand it.
"Individual object" = one specific swf file / webfont file / etc. Example:
Code: Select all
https://example.com/some/what/ever/thing.woff
I'm using the term "origin" to refer to the site hosting the objects. (This is what you see in Blocked Objects.)
"Request origin" is the site causing the object to be requested. (This is the site in parentheses in the Blocked Objects entries below the separator(s).)
Pretty straightforward right?
kukla wrote:never sure when allowing a FONT object is really needed or potentially malicious if allowed.
Webfont
*is* potentially malicious if allowed, that's why NoScript blocks it except when you, the user, really trust the site serving it (in this case Apple) not to be evil with webfont.
Allowing a webfont is needed if:
1) the site's icons are displaying as either weird character or box with small letters/numbers in it, and you need/want the icons;
2) the site sets & hosts its own font, and you think the fallback is a massive eyesore;
3) you decide you need it, for whatever reason.
Because fonts are largely cosmetic, unlike scripts which can make up part of site functionality, whether it's "needed" it's mainly a matter of your personal opinion.
Re: How to permanently allow blocked objects?
Posted: Sat Jun 11, 2016 4:57 pm
by kukla
Thanks, great explanation for the Fonts question, but
I'm using the term "origin" to refer to the site hosting the objects. (This is what you see in Blocked Objects.)
"Request origin" is the site causing the object to be requested. (This is the site in parentheses in the Blocked Objects entries below the separator(s).)
how would one use this in deciding whether to allow one or the other, "Request origin" or "origin" ? "Request origin" would be third party, and more likely to be malicious? "origin" is coming directly from the site itself?
Re: How to permanently allow blocked objects?
Posted: Sat Jun 11, 2016 7:50 pm
by barbaz
"Request origin" is usually the site you're navigated to (like on this page it would be "
https://forums.informaction.com").
"origin" is where the font is hosted and could be a third-party etc like you said...
It is not currently possible to allow objects only by request origin:
viewtopic.php?f=7&t=21111
You can allow all by origin in the Blocked Objects menu, using the entries below the separator(s) that have no parenthesized site. The entries with a parenthesized sites are allowing blocked objects on a per-site basis.
In most cases you'd just want to allow the individual objects.
Re: How to permanently allow blocked objects?
Posted: Sun Jun 12, 2016 4:49 am
by kukla
Thanks again barbaz for the help. Looks like I had Request origin and origin reversed. It's getting clearer, but all I can say is the Blocked objects sub-menu isn't very user friendly. Couple that with deciding whether to allow a script or not, and it can become quite a chore, especially when there are numerous scripts to allow or not (more scripts appearing only once one or several of the first have been allowed), many of which are not readily identifiable as advertising or trackers. I sometimes just have to give up and forget about getting a site working properly.
Re: How to permanently allow blocked objects?
Posted: Sun Jun 12, 2016 3:23 pm
by barbaz
kukla wrote:deciding whether to allow a script or not, and it can become quite a chore, especially when there are numerous scripts to allow or not (more scripts appearing only once one or several of the first have been allowed), many of which are not readily identifiable as advertising or trackers.
This
viewtopic.php?p=75314#p75314 might help you there.
Re: How to permanently allow blocked objects?
Posted: Wed Jun 15, 2016 2:47 pm
by kukla
Thanks for the tip.
Re: How to permanently allow blocked objects?
Posted: Wed Jun 15, 2016 3:23 pm
by barbaz
You're welcome!
