InformAction Forums

hi, i have a couple of questions. they may be dumb - i'm sorry in advance. if i set the noscript addon to "forbid scripts globally", and then open up a link in a new tab, can i safely assume that the new tab will be automatically set to block all scripts until i change the settings? also, sometimes when i use noscripts, and see the S with the line through it, and click on a link, i'll see that the S no longer has a line through it (i think it shows as a partial?) and there is a question that reads something like: "allow about:blank". if i then click on the button and manually disallow it (at which point the S has a line through it again), is it safe to assume that at no point in that process has a script been allowed to run on my browser?

i have used the setup both in firefox and in tor browser, which have slightly different interfaces - but really the questions apply to any instance of use of noscript. thanks in advance.

> if i set the noscript addon to "forbid scripts globally"

That is the default, with only a select few sites whitelisted by default.

> the new tab will be automatically set to block all scripts until i change the settings

Yes.

thanks. how about the issue (or question) about about:blank? any help is appreciated. thanks.

hello again. i think i have a more accurate view of what's happening. it's not the about:blank that is making me wonder. it's when i have opened a link in a new tab and the screen shows about:neterror. the S, which would normally have a line through it, then has no line through it at all. and when i hover the cursor over the dropdown menu, it says "scripts currently allowed". yet if the settings have been set to forbid scripts globally, then why would it switch somehow to allow them? is this a vulnerability?

rossx1 wrote:thanks. how about the issue (or question) about about:blank? any help is appreciated. thanks.

http://noscript.net/faq#qa1_9

rossx1 wrote:hello again. i think i have a more accurate view of what's happening. it's not the about:blank that is making me wonder. it's when i have opened a link in a new tab and the screen shows about:neterror. the S, which would normally have a line through it, then has no line through it at all. and when i hover the cursor over the dropdown menu, it says "scripts currently allowed". yet if the settings have been set to forbid scripts globally, then why would it switch somehow to allow them? is this a vulnerability?

http://noscript.net/faq#qa1_5

thanks. one last question. what if i have set noscript to forbid scripts globally, and open a link and get to the about:neterror page, which is whitelisted so scripts are allowed. then i hit refresh and connect to the page i had initially tried to get to. do scripts stop being allowed as soon as i leave the about:neterror page? that is, is there any vulnerability to scripts that arises because of the temporary state of being on a whitelisted about:neterror page? just making sure. thanks in advance.

rossx1 wrote:that is, is there any vulnerability to scripts that arises because of the temporary state of being on a whitelisted about:neterror page?

No.