Page 1 of 1

I guess I never understood how NoScript works?

Posted: Thu Feb 13, 2014 2:38 am
by CFLKitchen
I've had NoScript on for ages, but recently opened up the options and found all sorts of ad stuff in my whitelist. I deleted tons of it. I'd allowed stuff on sites, like comics I read, so that those comic guys would get what's due them.

So what I'm reading here is that if I allow scripts from, say, XYZ when I'm on some web comic for example, then scripts from XYZ are allowed on this page, that page, any page. I guess all this time I misunderstood. I only wanted scripts from XYZ to be allowed when I'm visiting some web comic, not everywhere in the world. So that's not what NoScript does? I say this because as soon as I Add All From This Page on some web comic, then XYZ is added to my whitelist.

And about that Whitelist. I trimmed it down, exported it, came back after testing some pages that allowed a bunch of stuff to be added, then imported my saved whitelist, aaaaaand nothing. The whole list, unwanted sites and all, was still there. Is the import function just an Add, not an Add and Replace? Do I need to highlight and delete the entire whitelist and THEN import stuff? Because, yeah, that makes no sense.

I'm just confused, and frustrated. Also, just trying to put this post in triggered an antispam filter, took 15 tries to get it through, since it never gave me a hint what it didn't like in my text. Had to rewrite it without specific examples.

Re: I guess I never understood how NoScript works?

Posted: Thu Feb 13, 2014 3:52 am
by Thrawn
CFLKitchen wrote: So what I'm reading here is that if I allow scripts from, say, XYZ when I'm on some web comic for example, then scripts from XYZ are allowed on this page, that page, any page. I guess all this time I misunderstood. I only wanted scripts from XYZ to be allowed when I'm visiting some web comic, not everywhere in the world. So that's not what NoScript does? I say this because as soon as I Add All From This Page on some web comic, then XYZ is added to my whitelist.
Correct.

NoScript is not an adblocker. It is a security tool. Either you trust that scripts from XYZ are safe, or you don't. And "safe" means "they won't attack my computer, or I can sue them if they do". If they're safe, then they're safe everywhere. If they're unsafe, then they're unsafe everywhere. From a security standpoint, that's all that matters.

If you want to protect your privacy, then you probably want Adblock Plus, RequestPolicy, etc. Privacy is a side-benefit of NoScript, not the focus.
And about that Whitelist...Is the import function just an Add, not an Add and Replace?
I believe so, yes.
Because, yeah, that makes no sense.
It does make sense if you think of it as a backup.
I'm just confused, and frustrated. Also, just trying to put this post in triggered an antispam filter, took 15 tries to get it through, since it never gave me a hint what it didn't like in my text. Had to rewrite it without specific examples.
Sorry to hear that. We do get a lot of spammers here, so the filter has to be fairly aggressive. You can always send something to a moderator via private message if you need to (the filter doesn't affect us).

And the reason it doesn't tell you why it rejects something is because that would make it easy for the spammers to analyse and bypass it.