Page 1 of 2
[RESOLVED] NoScript is Automatically Whitelisting Sites
Posted: Wed Jun 19, 2013 7:11 pm
by JusWondrin
Hi, New to NS. Love it -- thanks!!
I always have NS (ver. 2.6.6.2) default set to have scripts blocked & have only ever used the "temporarily allow permissions" & "revoke temporary permissions" functions. Today when I went to the whitelist, I noticed that new websites I've visited (and temporarily allowed) had automatically posted to the whitelist even though I never manually added any. I am not talking about the default list that was there on inception, but sites I've visited and that presumptuously implanted themselves on the list. It is also not all sites I've temp. allowed, only some.
Why is this happening and how do I stop it?
Also, re: for sites that have added themselves to the list, when I visit them, scripts are still not allowed and I have to allow them manually, so I must not understand how this list works.
Sorry if I'm asking dumb or obvious questions, but this is new to me, and I have only intermediate tech knowledge -- just enough to get myself in trouble, so keep it simple for me, OK?
BTW, Sorry if this is already posted somewhere; I did spend probably at least 1/2 hour searching this site for an answer and reading info. before I posted, but a lot of stuff here -- it's like trying to find a needle in a haystack. Great Add-on -- thanks!
Re: NoScripts is Automatically Whitelisting Sites
Posted: Wed Jun 19, 2013 7:32 pm
by therube
> I noticed that new websites I've visited (and temporarily allowed) had automatically posted to the
> whitelist even though I never manually added
There is a defaulted whitelist, but other then that, what you say should not be happening.
> for sites that have added themselves to the list, when I visit them, scripts are still not allowed
Examples?
The domains you Allowed should be, allowed.
There could be other domains, unrelated, which would not be.
Re: NoScripts is Automatically Whitelisting Sites
Posted: Wed Jun 19, 2013 10:28 pm
by JusWondrin
If you like, I can provide a screenshot of the whitelist additions for your example request; perhaps better to post in private message (?) if you tell me how; otherwise, I can probably post it here.
I tried some of the domains on the list that "added themselves", but scripts are still blocked for them. That's OK by me since I didn't want them on the list to begin with, and I never put them there; I'm just trying to figure out what's going on, and if I understand the functionality correctly.
And if something's happening that's not supposed to, I'd like to know how to fix it if possible. Thanks.
Re: NoScripts is Automatically Whitelisting Sites
Posted: Wed Jun 19, 2013 11:26 pm
by JusWondrin
Tried initiating PM, but not sure if I should send directly. Also could not embed image & I don't see attachment option. Other suggestion? Did you just want list of examples? Thanks.
Re: NoScripts is Automatically Whitelisting Sites
Posted: Thu Jun 20, 2013 2:20 am
by Thrawn
The ideal would be to list URLs where this occurs, so that we can test them out and try to reproduce the problem. Someone else reported something similar recently.
Re: NoScripts is Automatically Whitelisting Sites
Posted: Thu Jun 20, 2013 2:49 am
by JusWondrin
The urls won't pass through your anti-spam filter. Please advise. Thanks.
Re: NoScripts is Automatically Whitelisting Sites
Posted: Thu Jun 20, 2013 2:56 am
by JusWondrin
I sent message through PM to Thrawn -- it went through that way.
Re: NoScripts is Automatically Whitelisting Sites
Posted: Thu Jun 20, 2013 3:25 am
by JusWondrin
May have to correct part of what I'm saying since I'm new at this add-on -- sorry: learning curve.
When I say scripts are still blocked for those even though on whitelist, I guess they are partially allowed. I think this means that it is only the second tier of scripts that is blocked rather than those for the main page. ( It is not the big red circle I see over the "S", but the small red circle at 5-oclock position.)
(I just learned about 2nd/3rd tier scripts today.)
Anyway, if sites are on the whitelist, I assume that second-tier scripts would still get blocked for protection, right? Please confirm/deny. (n00b!

)
Still doesn't 'splain why they got on list in first place since I didn't put them there...?? So will wait for further input.
Thanks!
Re: NoScripts is Automatically Whitelisting Sites
Posted: Thu Jun 20, 2013 3:31 am
by JusWondrin
I also think I now see how to get the urls through the filter -- button on toolbar...Duh...like I said -- learning curve.
Re: NoScripts is Automatically Whitelisting Sites
Posted: Thu Jun 20, 2013 4:03 am
by JusWondrin

Truly embarrassing question: I thought I sent the PM, but I just noticed that it's still sitting in the "out" box, not the "sent" folder. Do I still have to do something?
Thanks!
Re: NoScripts is Automatically Whitelisting Sites
Posted: Thu Jun 20, 2013 6:29 pm
by JusWondrin
Related to this issue:
This morning I went to find a bookmark in my bookmarks list, and noticed that Vudu.com had been added to my bookmarks. I've never visited this site, much less bookmarked it.
I clicked on it and noticed that script permissions were fully granted, which surprised me.
NS gave me the option to revoke temp. permissions, which I did, but I noticed that parent permissions were still allowed (only secondary permissions were revoked).
Still perplexed, I went to NS whitelist, and sure enough -- Vudu had mysteriously and newly appeared there (after my last postings here last evening).
What is going on, and how/why is this happening? I'm getting seriously concerned about my computer security at this point since I've been entering a lot of account passwords and last night I even had to do some online banking. I'm afraid to go into my "secure" accounts now, and wondering if a hacker is somehow getting my info.
I visited one possibly questionable site yesterday (though "good" rating on Wot), and have been noticing more "questionable" behavior ever since then.
I'm running AdBlock Plus with pop-up blocker, NoScript, Wot, and Microsoft Security Essentials as my only virus protection right now. I ran virus scan and nothing.
I also want to get ClearClick, but just learned about it yesterday, and so far don't see a place from which I can install it. Any direction on that as well?
Please help -- thanks!
BTW, I will try to repost the whitelist e-mail I sent yesterday by PM into the public area so that anyone can help me. Thanks.
Re: NoScripts is Automatically Whitelisting Sites
Posted: Thu Jun 20, 2013 6:41 pm
by JusWondrin
Here ya go. As far as I can tell, these are the ones that hopped on over to Whitelist by themselves. I wish I could show you a screen shot, but doesn't appear as if I can put it here so typed list as they appear:
http://dictionary.reference.com
http://sandiego.craigslist.org
http://www.amazon.com
http://www.bing.com
http://www.ehow.com
http://www.microsoft.com
http://www.mozilla.com
http://www.urbandictionary.com
https://www.support.mozilla.org
https://www.wikipedia.org
There may be a few that were on the default list (???), but these are isolated from all the others in the default list and clustered together near the bottom -- nested amongst the disabled ones (these are enabled as active on whitelist).
I have no windows for any of them open. When I type them into browser address bar to navigate to them, secondary tier scripts are blocked, but primary/parent scripts allowed.
Please advise. Thanks!
Update: After "forbidding" Vudu, it came off the whitelist, but wikipedia is a new self-addition to the whitelist as of this morning. I visited wikipedia this morning, but did not whitelist it. At most I TA'd it, if even that. I visited other sites this morning that did not whitelist themselves. I never visited or gave permissions to Vudu, which was also a new whitelist addition this morning; however, after "forbidding" it, it's no longer on the whitelist.
Please advise. Thanks!
Re: NoScripts is Automatically Whitelisting Sites
Posted: Thu Jun 20, 2013 6:45 pm
by JusWondrin
Hmm, curious -- that url list was continually blocked by your spam filters yesterday, which is why I sent it via PM, but it went through to the post fine this morning w/o being blocked. I didn't do anything different (...???)
Re: NoScripts is Automatically Whitelisting Sites
Posted: Fri Jun 21, 2013 1:33 am
by JusWondrin
What's up with the spam response in this thread....???
Re: NoScripts is Automatically Whitelisting Sites
Posted: Fri Jun 21, 2013 9:53 am
by Giorgio Maone
Sorry for the late answer, I was traveling without connectivity when you sent me your PM/email and I lost it in my backlog when I've been back.
Anyway, the solution was the simplest possible: you've got your NoScript Options|General|Teporarily allow top-level sites by default checkbox enabled.
Just uncheck it, and everything will be sane again.