Page 1 of 1
[INVALID] Bug Report
Posted: Tue Oct 27, 2015 9:58 am
by Synthhead
I noticed what seems like a big bug... Noscript allows Java everywhere once allowed on one site, "Jquery" that is.. Cheers
Re: Bug Report
Posted: Tue Oct 27, 2015 2:17 pm
by barbaz
This is not a bug. Jquery is JavaScript, which is totally different from Java. Furthermore, NoScript does not have simple per-site permissions for JavaScript (see
https://noscript.net/faq#qa8_10) and won't until NoScript 3.x for desktop. Please note that per-site permissions don't add anything to security, since by allowing its scripts you are trusting the entity you're giving permissions to, there is no half-trust in security, either an entity is evil or it's not, and an evil entity only needs one chance to pwn you.