JavaScript

[GerryR]

I have a suggestion to make which may well get me flamed. I use Firefox 19.0. That may or may not be germane. There are many free JavaScript toggles. Unfortunately they do me no good whatsoever because NoScript overrules all of them and only allows me to "allow page". People who use NoScript are not novices. I, and several of my developer friends, would really like you to leave JavaScript alone and simply allow us to use those toggles. I may not wish to "Allow Page" because I don't know what else I may be allowing privileges that I don't know about and don't want. I (a two-time contributor) love most of your soft. I never say 100% because of unknowns. I want to use a JavaScript toggle, so that I don't have to "Allow Page" but you override all of the ones that I have tried (including Firefox add-ons). Will you please consider my request. I don't feel secure Allowing an Entire Page" which may have malware and would much rather simply turn JavaScript on only when I need it. Then, when JavaScript is no longer necessary I would toggle it off because I don't trust it any more than anybody else.

[access2godzilla]

Clearly, you overlooked:

Noscript menu > Allow scripts globally

[Thrawn]

I have a suggestion to make which may well get me flamed.

Very unlikely. If you're respectful, we will be too.

I use Firefox 19.0. That may or may not be germane.

No problem. It's a supported version.

There are many free JavaScript toggles. Unfortunately they do me no good whatsoever because NoScript overrules all of them and only allows me to "allow page".

Not sure what you mean here? 'Allow page' is not a NoScript option. 'Allow All This Page' is an option, but not a recommended one, and certainly not the only one. The recommended NoScript approach is to allow specific domains, or temporarily allow them if you don't know whether you'll need them regularly.

Example: I use Yahoo mail. I've allowed scripts from yahoo.com and yimg.com, so the site works, but I'm still blocking scripts from serving-sys.com, so I don't get tracked. NoScript certainly isn't an all-or-nothing approach; it's very configurable.

People who use NoScript are not novices.

I know. However hard it tries, a script-blocker isn't really a tool for novices, and NoScript is more complex than most script-blockers. But have you read the FAQ, "Features" Page, looked through the options, etc?

I, and several of my developer friends, would really like you to leave JavaScript alone and simply allow us to use those toggles.

Not sure what you mean again. This is NoScript, after all...why would you not want it to block JavaScript?

As for toggles...you mean like QuickJava? Yeah, that works (don't use it myself), but I can't see why you'd prefer something that requires you to be constantly switching it on and off, either allowing the whole world or blocking even trusted sites, instead of the 'train it and then forget about it' approach of NoScript.

Still, as previously mentioned, you can use 'Scripts Globally Allowed' if you want to do this. It's on the NoScript menu by default. And if you want, you can configure NoScript to allow all JavaScript but block embeddings (plugins, IFRAME, etc).

I may not wish to "Allow Page" because I don't know what else I may be allowing privileges that I don't know about and don't want.

Huh? This is exactly why NoScript is so much better than the toggles you were talking about. It doesn't require you to allow everything. You can allow the exact domains that you trust, and no others. If you're really paranoid, then go to Options - Appearance and you'll find that you can restrict it to allowing specific protocol + domain + port, eg allowing https://encrypted.google.com but no other Google. Toggles, on the other hand, do require you to allow everything or nothing.

I want to use a JavaScript toggle, so that I don't have to "Allow Page" but you override all of the ones that I have tried (including Firefox add-ons).

Again, huh? NoScript doesn't override anything. Unless you mean that it blocks pages even when other addons don't. Which is hardly surprising. But if another addon turns off JavaScript/Java/etc, then NoScript isn't going to override that.

If you want to combine the two, try allowing a site in NoScript, then use a toggle to switch JavaScript on and off. The result: when JavaScript is enabled, only that site will be allowed to run it; when off, nothing can.

Will you please consider my request. I don't feel secure Allowing an Entire Page" which may have malware and would much rather simply turn JavaScript on only when I need it. Then, when JavaScript is no longer necessary I would toggle it off because I don't trust it any more than anybody else.

What you want is 'Temporarily Allow <site>, and it appears on the menu by default. When you're done with the site, just select either 'Forbid <site>' or 'Revoke Temporary Permissions'. And as previously mentioned, it is not necessary and not recommended to do this for an entire page. Just choose the domains you want.

Unless you really want NoScript to stop blocking scripts - which makes no sense to me, given the addon's name - then I'm not sure what request you're asking Giorgio to consider.