InformAction Forums

Hi to all, I can't understand what exactly happens once I set a site as 'Allow all this page'. For instance into a page that I'm visiting for inst. 'www.aaa.com' I set 'Allow all this page' giving the permit to load 'imrworldwide.com' that is incorpored by scripts into the site 'www.aaa.com', when I go to another domain for inst. 'www.bbb.com' that has 'imrworldwide.com' inside at the new page that I'm visiting, does NoScript allows to load 'imrworldwide.com' seen that just one minute before I allowed it inside at another page of another domain (www.aaa.com)?


I try in Italian, my mother tongue, maybe I can explain more effectively:
Se sono su un sito ad es. 'www.aaa.com' e applico 'Allow all this page' permettendo ad altri siti incorporati/script di essere caricati come ad esempio 'imrworldwide.com', come si comporterà NoScript una volta che sarò su un altro sito ad es.'www.bbb.com' che anch'esso ha 'imrworldwide.com' incorporato nella pagina che sto visitando? Caricherà tranquillamente 'imrworldwide.com' visto che solo un minuto prima lo aveva caricato nel sito 'www.aaa.com' oppure sarà selettivo rispettando le impostazioni/regole generali usate per tutti i siti non precedentemente segnati come 'permessi/withelisted'?

pacarz69 wrote:For instance into a page that I'm visiting for inst. 'www.aaa.com' I set 'Allow all this page' giving the permit to load 'imrworldwide.com' that is incorpored by scripts into the site 'www.aaa.com', when I go to another domain for inst. 'www.bbb.com' that has 'imrworldwide.com' inside at the new page that I'm visiting, does NoScript allows to load 'imrworldwide.com' seen that just one minute before I allowed it inside at another page of another domain (www.aaa.com)?

Yes, if you allow scripts at www.bbb.com.

If the top-level site, www.bbb.com, is blocked, then everything is blocked, no matter what. If you allow www.bbb.com, then yes, imrworldwide.com will be allowed. This makes sense, because if you allowed imrworldwide.com at one site, then obviously you don't think that it's going to attack you.

If you want more fine-grained control, you'll need to wait for NoScript 3.x for the desktop, or write ABE Rules, or use another addon like RequestPolicy.

> If the top-level site, www.bbb.com, is blocked, then everything is blocked, no matter what.

I don't think that is quite right.
"Embeddings" (like from Flash domains) could be allowed even though the top-level site is not.

You're right. Replace 'everything' with 'all sites'.