Page 1 of 1
NoScript isn't active in SeaMonkey email client?
Posted: Wed Aug 21, 2013 3:36 pm
by barbaz
Why doesn't NoScript show up in SeaMonkey's email client? Some emails require to be viewed as HTML, which could include active content, and disabling that by default would be a good idea. Also, ABE could be useful here with rules like
Code: Select all
Site ^https?:
Deny from <all emails>
Re: NoScript isn't active in SeaMonkey email client?
Posted: Thu Aug 22, 2013 3:59 pm
by access2godzilla
JS is disabled in the mail client by default, so it doesn't make any sense to have NS there.
Re: NoScript isn't active in SeaMonkey email client?
Posted: Thu Aug 22, 2013 5:49 pm
by barbaz
access2godzilla wrote:JS is disabled in the mail client by default, so it doesn't make any sense to have NS there.
(Is this set through CAPS?)
Nice, thanks for telling me... but Javascript blocking isn't the only protection NS offers. In particular, shouldn't ABE be active to control remote requests?
Re: NoScript isn't active in SeaMonkey email client?
Posted: Fri Aug 23, 2013 12:01 am
by therube
JavaScript
- For security reasons, JavaScript is no longer supported for mail/news content
The javascript.allow.mailnews preference has been removed
http://kb.mozillazine.org/Thunderbird_3 ... JavaScript
Re: NoScript isn't active in SeaMonkey email client?
Posted: Fri Aug 23, 2013 3:30 am
by barbaz
barbaz wrote:Also, ABE could be useful here with rules like
Code: Select all
Site ^https?:
Deny from <all emails>
N/M, didn't see the checkbox in mail prefs.
I mainly wanted SM for the browser and composer so didn't really look at mailnews reader that much.
therube wrote:JavaScript
- For security reasons, JavaScript is no longer supported for mail/news content
The javascript.allow.mailnews preference has been removed
http://kb.mozillazine.org/Thunderbird_3 ... JavaScript
Good decision by the Thunderbird team, and good decision by the SeaMonkey team to also implement this change.