Page 1 of 1

Question Re: Original default whitelist (on initial install)

Posted: Sat Nov 22, 2014 5:42 pm
by lakrsrool
Can someone please provide (or link to) the original default list of web sites that exists in the NoScript options WHITELIST (that is when NoScript is first installed)?

Is there a way to revert back (reset) to this default list? (if not a "reset" function of some sort [button] would be a good idea)

I ask this because I've added some myself that I would like to remove after getting a better understanding of NoScript but noticed there are a whole lot of websites that I do not recall adding at all.

Also there are some websites that are grayed out hence should remain that are presumably desirable to have in the WHITELIST permanently, possibly this IS the default list (but if so I can't understand why there are so many websites I do not recognize at all if this is the case).

ADDENDUM: To follow-up because NoScript adds websites that users may have selected "All this page" this could possibly account for all the sites I do not recognize being added manually by me. I've noticed that NoScript will remove the list if "All this page" is deselected (which is good of course) but I notice that in one specific example there is a website that looks related to amazon named "amazon-adsystem.com" that remains in the WHITELIST even if I have everything disabled for amazon (which again makes me wonder if there are some web addresses that need to remain as default other than the grayed sites in the WHITELIST). Note: amazon-adsystem.com is an invalid website (servers not found error in Firefox) so there is something I'm not understanding obviously about this web address.

This is why it would be a good thing to be able to "reset" (back to default) for the WHITELIST. Also it is interesting that this one specific example I'm using that is amazon appears to work just fine completely disabled as far as NoScript is concerned which surprises me.

Thanks in advance for any help.

Re: Original default whitelist (upon initial install)

Posted: Sat Nov 22, 2014 6:36 pm
by therube
> the original default list of web sites that exists in the NoScript options WHITELIST (that is when NoScript is first installed)

Within the .xpi itself, defaults/Preferences you can find:

Code: Select all

pref("noscript.mandatory", "chrome: blob: moz-safe-about: about: about:addons about:blocked about:crashes about:home about:config about:neterror about:certerror about:memory about:plugins about:privatebrowsing about:sessionrestore about:support resource: about:srcdoc");

Code: Select all

pref("noscript.default", "about:blank addons.mozilla.org persona.org mozilla.net flashgot.net google.com gstatic.com googleapis.com paypal.com paypalobjects.com securecode.com securesuite.net firstdata.com firstdata.lv informaction.com yahoo.com yimg.com yahooapis.com youtube.com ytimg.com maone.net noscript.net hotmail.com msn.com passport.com passport.net passportimages.com live.com live.net outlook.com afx.ms gfx.ms sfx.ms wlxrs.com ajax.aspnetcdn.com cdnjs.cloudflare.com code.jquery.com yandex.st mootools.net prototypejs.org tinymce.cachefly.net vjs.zendcdn.net");
> a way to revert back to this default list?

Suppose that a Reset does that.
NoScript | Options -> Reset (button).
(Though note it does more then simply resetting the whitelist back to defaults.)

> amazon-adsystem.com

Is not a defaulted domain.
(Because it says "amazon" does not necessarily mean that it has anything to do with Amazon.com, though in this case it appears it does.)

Re: Original default whitelist (upon initial install)

Posted: Sat Nov 22, 2014 8:21 pm
by lakrsrool
therube wrote:
> a way to revert back to this default list?

Suppose that a Reset does that.
NoScript | Options -> Reset (button).
(Though note it does more then simply resetting the whitelist back to defaults.)
Thanks very much for the reply.

It would be nice to have a "RESET" button for JUST the Whitelist (apparently this is not an option) instead of resetting everything (globally) for NoScript. Btw, also according to LINK FAQ 2.4 quote: "If you want a copy of your whitelist alone as a text file, which you can transfer to other profiles or computers, you can use the Export and Import commands from NoScript Options|Whitelist.", but I found that the "Export" gives you all the NoScript (global) settings while on the "Whitelist tab" and pressing "Export" so the user would still have to search out and extract the Whitelist entries specifically to get just that. So apparently the "Export" button (which is on every option window page) is global in nature, so the FAQ is confusing the way it is worded because immediately after that FAQ statement above it then says "If you want to backup your whole NoScript configuration and permissions, you can use the Export and Import buttons at the bottom of the Options dialog." which would lead one to believe that the first FAQ statement is different than the second but in reality the "Export" button does the same thing in all cases and will not provide "your whitelist alone as a text file" as FAQ states in the initial statement (reference link above).

What I did was do the "RESET" and then change some of my NoScript global settings back to what I had.

So apparently the Whitelist has the following (see below, which you provided as well in your reply) as default (it's interesting to look at some of these sites that are whitelisted by default i.e. youtube which allows google.com as a result which I disallowed upon bringing up the page)

DEFAULT WHITELIST VALUES (as listed in NoScript interface):

Code: Select all

ajax.googleapis.com 
cdnjs.cloudflare.com 
code.jquery.com 
firstdata.com 
firstdata.lv 
flashgot.net 
gfx.ms 
google.com 
gstatic.com 
hotmail.com 
informaction.com 
live.com 
live.net 
maone.net 
mootools.net 
mozilla.net 
msn.com 
noscript.net 
outlook.com 
passport.com 
passport.net 
passportimages.com 
paypal.com 
paypalobjects.com 
persona.org 
prototypejs.org 
securecode.com 
securesuite.net 
sfx.ms 
tinymce.cachefly.net 
vjs.zendcdn.net 
wlxrs.com 
yahoo.com 
yahooapis.com 
yandex.st 
yimg.com 
youtube.com 
ytimg.com 
about: 
about:addons 
about:blank 
about:blocked 
about:certerror 
about:config 
about:crashes 
about:home 
about:memory 
about:neterror 
about:plugins 
about:privatebrowsing 
about:sessionrestore 
about:srcdoc 
about:support 
blob: 
chrome: 
moz-safe-about:
resource:

Re: Original default whitelist (upon initial install)

Posted: Sat Nov 22, 2014 8:30 pm
by barbaz
lakrsrool wrote:according to LINK FAQ 2.4 quote: "If you want a copy of your whitelist alone as a text file, which you can transfer to other profiles or computers, you can use the Export and Import commands from NoScript Options|Whitelist.", but I found that the "Export" gives you all the NoScript (global) settings while on the "Whitelist tab" and pressing "Export" so the user would still have to search out and extract the Whitelist entries specifically to get just that. So apparently the "Export" button (which is on every option window page) is global in nature, so the FAQ is confusing the way it is worded because immediately after that FAQ statement above it then says "If you want to backup your whole NoScript configuration and permissions, you can use the Export and Import buttons at the bottom of the Options dialog."
There should be two Import/Export buttons on NoScript Options > Whitelist, you use the upper ones for just the whitelist and the bottom ones for the whole config

If you want to reset just the whitelist:
1) create new profile, install only NoScript
2) export only whitelist
3) switch back to your normal profile
4) export whitelist only
5) copy entire UNTRUSTED section from normal profile whitelist export to default whitelist export
6) import modified whitelist file with default whitelist and your untrusted list