NoScript isn't active in SeaMonkey email client?

[barbaz]

Why doesn't NoScript show up in SeaMonkey's email client? Some emails require to be viewed as HTML, which could include active content, and disabling that by default would be a good idea. Also, ABE could be useful here with rules like

Code: Select all

Site ^https?:
Deny from <all emails>

[access2godzilla]

JS is disabled in the mail client by default, so it doesn't make any sense to have NS there.

[barbaz]

JS is disabled in the mail client by default, so it doesn't make any sense to have NS there.

(Is this set through CAPS?)

Nice, thanks for telling me... but Javascript blocking isn't the only protection NS offers. In particular, shouldn't ABE be active to control remote requests?

[therube]

JavaScript

• For security reasons, JavaScript is no longer supported for mail/news content
  The javascript.allow.mailnews preference has been removed

http://kb.mozillazine.org/Thunderbird_3 ... JavaScript

[barbaz]

Also, ABE could be useful here with rules like

Code: Select all

Site ^https?:
Deny from <all emails>

N/M, didn't see the checkbox in mail prefs.
I mainly wanted SM for the browser and composer so didn't really look at mailnews reader that much.

JavaScript

• For security reasons, JavaScript is no longer supported for mail/news content
  The javascript.allow.mailnews preference has been removed

http://kb.mozillazine.org/Thunderbird_3 ... JavaScript

Good decision by the Thunderbird team, and good decision by the SeaMonkey team to also implement this change.