Page 1 of 1
[RESOLVED]NoScript doesn't give option to forbid single scri
Posted: Sat Nov 22, 2014 7:28 pm
by pg-extra
Greetings all.
I am using NoScript version 2.6.9.4 on Tor Browser 4.0.1.
Up to now, when I visited a website, NoScript gave a list of scripts that I could individually choose to allow or forbid. But since lately, I only have 2 options :
- Temporarily allow all this page
- Allow Scripts Globally
What can I do to get back the option of choosing to enable/disable individual scripts ? Another problem is that Tor Browser resets all settings on startup.
Thank you and kind regards,
pg
Re: NoScript doesn't give option to forbid single scripts
Posted: Sat Nov 22, 2014 7:41 pm
by barbaz
NoScript Options > Advanced > Trusted > un-check Cascade top-document's permissions... ?
Re: NoScript doesn't give option to forbid single scripts
Posted: Sat Nov 22, 2014 8:06 pm
by pg-extra
Thank you for your answer, but it doesn't change anything, although it should. I suppose it's more of a Tor problem than NoScript problem then. :/
Re: NoScript doesn't give option to forbid single scripts
Posted: Mon Nov 24, 2014 1:53 am
by Thrawn
barbaz wrote:NoScript Options > Advanced > Trusted > un-check Cascade top-document's permissions... ?
That wouldn't explain the 'Temporarily allow all this page' option...
I'm not sure exactly how Tor Browser is configured, but I do know that it focuses on privacy over security (which was actually the motivation for the Cascade Permissions feature; it stops sites from fingerprinting your whitelist).
What settings do you have in Options-Advanced-HTTPS-Permissions?
Re: NoScript doesn't give option to forbid single scripts
Posted: Mon Nov 24, 2014 3:27 am
by barbaz
What is checked in NoScript Options > Appearance ?
Re: NoScript doesn't give option to forbid single scripts
Posted: Mon Nov 24, 2014 10:50 am
by pg-extra
Thank you for answers.
@Thrawn - the settings in Options-Advanced-HTTPS-Permissions are :
- Forbid active web content unless ..... = Never
- Allow HTTPS scripts globally ... = unchecked
@barbaz - options checked in Appearance are :
- Contextual menu
- Allow scripts globally
- About NoScript
- Blocked Objects
- Temporarily allow all this page
- Revoke temporary permissions
Re: NoScript doesn't give option to forbid single scripts
Posted: Mon Nov 24, 2014 7:54 pm
by barbaz
pg-extra wrote:@barbaz - options checked in Appearance are :
- Contextual menu
- Allow scripts globally
- About NoScript
- Blocked Objects
- Temporarily allow all this page
- Revoke temporary permissions
That explains it. You need to check:
"Allow [...]"
"Temporarily allow [...]"
"Mark [...] as Untrusted"
"Untrusted"
Your preferred combination of "Base 2nd-level domains", "Full domains" & "Full addresses" (at least one of those needs to be checked)
That should get you a more reasonable looking NoScript menu
Re: NoScript doesn't give option to forbid single scripts
Posted: Mon Nov 24, 2014 8:33 pm
by pg-extra
That was it barbaz, thank you very much ! I didn't think these kind of settings could change so much just with a new version of Tor browser. Keep up the great work at the forum, thank you again
Re: NoScript doesn't give option to forbid single scripts
Posted: Tue Nov 25, 2014 11:51 pm
by Thrawn
pg-extra wrote:I didn't think these kind of settings could change so much just with a new version of Tor browser.
Ah. That comes back to what was said about Tor focusing on privacy over security. As soon as you start whitelisting individual sites, then your whitelist becomes specific to you, and it's possible in theory for a site to detect which ones are blocked. So the Tor folks prefer to use a 'whitelist/blacklist all' approach.