Page 1 of 1

Suppress clickjacking protection by whitelist?

Posted: Tue May 12, 2009 11:59 pm
by booyabazooka
I have to use a terrible website known as MasteringPhysics for homework assignments, and their unorthodox use of Flash triggers a clickjacking warning on every text field. I have masteringphysics.com on my whitelist, and the pages have no scripting elements from any other domain. Is there a solution aside from disabling noscript, or perhaps setting fire to Pearson Education and their web developers?

edit - alright, I found the checkbox that disables ClearClick for "trusted" sites. What I really would like is a separate clickjacking whitelist, though, because I still want it active on my other trusted sites...

Re: Suppress clickjacking protection by whitelist?

Posted: Wed May 13, 2009 12:09 am
by Giorgio Maone
about:config
noscript.clearClick.exceptions -> top-level sites exempted by ClearClick checks (your case)
noscript.clearClick.subexceptions -> subdocuments exempted by ClearClick checks.