Page 1 of 1
Allow Youtube but need permissions in third-party sites
Posted: Mon Sep 22, 2014 11:23 pm
by ReporterX
How could I configure it so it is allowed to load in Youtube, but asks for permission to embed/load in third-party sites?
There will be a placeholder on each youtube embedding (on third-party sites) and you need to click to allow it to load.
I know it has an "apply these restrictions to whitelist sites too" option.
But it applies globally. I only want it for some websites only.
Thanks a lot.
Re: Allow Youtube but need permissions in third-party sites
Posted: Mon Sep 22, 2014 11:35 pm
by barbaz
Unfortunately, you're going to have to wait for NoScript 3 for that.
If you don't mind not having placeholders, you could use ABE like
Code: Select all
Site .youtube.com .ytimg.com .googlevideo.com
Accept from .youtube.com .ytimg.com .googlevideo.com
Deny INCLUSION(SCRIPT, OBJ, FONT, XHR, MEDIA, SUBDOC)
Sandbox
and add other domains to the Accept line as needed.
ReporterX wrote:I know it has an "apply these restrictions to whitelist sites too" option.
But it applies globally. I only want it for some websites only.
about:config ->
noscript.allowedMimeRegExp
Re: Allow Youtube but need permissions in third-party sites
Posted: Mon Sep 22, 2014 11:58 pm
by ReporterX
Thanks for the reply.
Unfortunately what I want is "Ask per request" even in the same website that I would allow.
If I add the domain name to the "Accept from", it would be "Allow per site".
About noscript.allowedMimeRegExp, let's say I want to apply these restrictions to yahoo.com only (but not other whitelist sites).
What should I type? It does not seem like this pref could do this job.
Re: Allow Youtube but need permissions in third-party sites
Posted: Tue Sep 23, 2014 12:26 am
by barbaz
ReporterX wrote:Thanks for the reply.
Unfortunately what I want is "Ask per request" even in the same website that I would allow.
If I add the domain name to the "Accept from", it would be "Allow per site".
That is what I answered wait until NoScript 3
If you don't allow scripts on the third-party websites, and check all Embeddings (not necessarily "Apply these restrictions to whitelisted sites too") then I think NoScript will default display placeholders for youtube embeddings. It's when scripts are allowed on the 3rd-party site that you're stuck with either not having this or "Apply these restrictions to whitelisted sites too".
ReporterX wrote:About noscript.allowedMimeRegExp, let's say I want to apply these restrictions to yahoo.com only (but not other whitelist sites).
What should I type? It does not seem like this pref could do this job.
No, it can't act that way, because it's a whitelist of origin sites for plugin content, nothing to do with sites requesting the content.
Maybe ABE alongside that pref could do that, but again, I think the sort of feature you're looking for will likely be part of NoScript 3...
Re: Allow Youtube but need permissions in third-party sites
Posted: Tue Sep 23, 2014 4:17 am
by Thrawn
You could also try FlashBlock. Just bear in mind that it's not as reliable as NS for security purposes.
Re: Allow Youtube but need permissions in third-party sites
Posted: Wed Sep 24, 2014 1:32 pm
by ReporterX
Thrawn wrote:You could also try FlashBlock. Just bear in mind that it's not as reliable as NS for security purposes.
Thanks for your suggestion.
I see this line in the Flashblock page.
"Note: Flashblock does not work with Javascript disabled or with NoScript installed."
Too bad they are incompatible.
I prefer keeping NoScript.
Re: Allow Youtube but need permissions in third-party sites
Posted: Wed Sep 24, 2014 3:53 pm
by barbaz
I suspect Flashblock would work as expected on script-allowed sites, which is the missing feature you're looking for.
(Note that IIRC it doesn't prevent things from being downloaded; it's basically pressing "Pause" as soon as it can, which isn't always immediately. Check Giorgio's blog for more details.)
Re: Allow Youtube but need permissions in third-party sites
Posted: Wed Sep 24, 2014 5:26 pm
by therube
I haven't thought it through, but click-to-play settings need not necessarily coincide between Mozilla & NoScript, so perhaps something along that end?
Re: Allow Youtube but need permissions in third-party sites
Posted: Fri Sep 26, 2014 12:30 pm
by ReporterX
therube wrote:I haven't thought it through, but click-to-play settings need not necessarily coincide between Mozilla & NoScript, so perhaps something along that end?
Do you mean the "plugins.click_to_play" pref?
It is true by default but it does not help.
Youtube will still load into the site (even though it isn't played automatically).