Page 1 of 1

noscript settings

Posted: Thu Jul 30, 2009 2:38 am
by noscriptfefault
Hello Noscript forum,

I have decided to run NoScript pretty much default but I have a question: Does not checking forbid web-bugs and Meta-redirections decrease my internet security? I have found that running NoScript too tight causes my browser to crash and would like to run it default.I saw Noscript stop a clickjacking attempt and appreciated that extra security it gives. Do I need to have HTTP checked?I have no websites checked for forcing and I have the behavior setting to never.

Thanks for any advice here,

Re: noscript settings

Posted: Thu Jul 30, 2009 3:04 am
by Paranoid User
noscriptfefault wrote:Hello Noscript forum,

I have decided to run NoScript pretty much default but I have a question: Does not checking forbid web-bugs and Meta-redirections decrease my internet security? I have found that running NoScript too tight causes my browser to crash and would like to run it default.I saw Noscript stop a clickjacking attempt and appreciated that extra security it gives. Do I need to have HTTP checked?I have no websites checked for forcing and I have the behavior setting to never.

Thanks for any advice here,
I never experience any crash even if I tigthen the settings although I'm also a new user. You may want to disable all addons except NoScript (you may create a new profile for such a test) to see if the crash is reproducible. Report the problem here so the developer has a chance to fix it.
# Forbid "Web Bugs" blocks Web Bugs (tracking images) found inside <noscript> tags, used as a (less effective) fall-back to spy on user's behavior when scripts are not available.
# Forbid META redirections inside <noscript> elements, which are often used to send the unwilling user to a dumb "Please enable JavaScript" page. Notice that this option may interfere with the RefreshBlocker extension.
Neither of the above is to do with security.

Web Bugs are only a minor privacy issue where the website owner has limited ability to check minor things like whether you have visited their page or read this email etc. For email blocking web bugs may not be enough.Turning off HTML is an ultimate way to avoid any sort of tracking methods.

META redirection is only an annoyance. Sometimes the web owner may decide to redirect you to another page when it detects that javascript is disabled. Annoying or not depends on how website owner handles it. Not right or wrong in itself.

I hope the answer helps.

Re: noscript settings

Posted: Thu Jul 30, 2009 2:14 pm
by therube
I have found that running NoScript too tight causes my browser to crash
Agree with Paranoid User, that should not be happening.