InformAction Forums

On sites with scripts from many domains configuring NS and ABE is sometimes very difficult and time consuming, and too often I fail to get a site working correctly. (See also this thread http://forums.informaction.com/viewtopi ... 10&t=19328)
What would help a lot is a different NS menu icon for those domains that are on the white list but on that specific site blocked by an ABE rule. Currently those domains are shown as allowed. I don't know any way to find out what impact all current NS rules together have on a certain site.

The ABE UI is known to be very limited, and does not interact at all with the regular script-blocking. Theoretically ABE is supposed to be usable without NoScript.

Are you aware that ABE logs its results to the Browser Console?

Thrawn wrote: Are you aware that ABE logs its results to the Browser Console?

Well, now I am, thank you very much.
I will try next time to see whether this is of help for me to find out more easily about the correct ABE settings.

Thrawn wrote:The ABE UI is known to be very limited, and does not interact at all with the regular script-blocking. Theoretically ABE is supposed to be usable without NoScript.

Are you aware that ABE logs its results to the Browser Console?

So why not use those data to display different icons for globally allowed domains, but that are blocked by ABE?
I can manually check ABE ruleset for listed domains on a page I have trouble with, but that's just as uncomfortable as using Browser Console.
Why not implement new icons?

Also, is that okay that ABE rules work even when user selects "Allow scripts globally"? I don't think so.

iDrugoy wrote:Also, is that okay that ABE rules work even when user selects "Allow scripts globally"?

Er... they better work when scripts are globally allowed.
Otherwise people who have scripts globally allowed would be saying they *want* CSRF..
Bad idea IMO since people are more likely to pick "Allow Scripts Globally" when dealing with sensitive information when they really need everything to "just work", such as during a financial transaction, and CSRF during a situation like that could be disastrous.

(FYI you can already disable ABE through NoScript Options -> Advanced -> ABE, un-check "Enable ABE" or about:config -> noscript.ABE.enabled)

iDrugoy wrote:Also, is that okay that ABE rules work even when user selects "Allow scripts globally"? I don't think so.

If you leave your front door unlocked, that shouldn't automatically unlock your office safe.