Is there a way to limit scripts to 1st part only?

Ask for help about NoScript, no registration needed to post
nozzleberries34534523452345

Is there a way to limit scripts to 1st part only?

Post by nozzleberries34534523452345 »

I came across an old extension that claimed to only allow certain scripts when 1st party. Request Policy:
https://addons.mozilla.org/en-US/firefo ... rm=windows

In my testing, it did not work as advertised, nor did its settings appear to work either.

Are there plans to incorporate this level of complexity into NoScript? Or maybe something similar?

For example, if I go to facebook.com, I'd like to run scripts from facebook.com in that tab. However, I don't want to run facebook.com scripts in any other tab in case Facebook is tracking what I am doing. Similar for Amazon, Google, Microsoft, but applies to any- and everyone else.
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:49.0) Gecko/20100101 Firefox/49.0
barbaz
Senior Member
Posts: 11141
Joined: Sat Aug 03, 2013 5:45 pm

Re: Is there a way to limit scripts to 1st part only?

Post by barbaz »

nozzleberries34534523452345 wrote:I came across an old extension that claimed to only allow certain scripts when 1st party. Request Policy
RequestPolicy is dead. Try this one - https://addons.mozilla.org/addon/reques ... continued/
(I haven't used it myself, I prefer µMatrix)
nozzleberries34534523452345 wrote:For example, if I go to facebook.com, I'd like to run scripts from facebook.com in that tab. However, I don't want to run facebook.com scripts in any other tab in case Facebook is tracking what I am doing. Similar for Amazon, Google, Microsoft, but applies to any- and everyone else.
I believe this is planned for NoScript 3.

In the mean time, you can achieve this for individual sites with ABE. Since your concern is tracking, this is what it would look like for facebook:

Code: Select all

Site ^[0-9A-Za-z-]+://(?:[^/:]+\.)?(?:facebook|fbcdn|insta(?:gram)?|fb[^/:]*-a\.akamaihd)\.[0-9A-Za-z]+[^0-9A-Za-z_\.%-] .fb.me
Accept from .facebook.com .facebook.net .fbcdn.net .akamaihd.net .instagram.com .insta.me
Deny INC(SCRIPT, OBJ, FONT, XHR, MEDIA)
Sandbox
viewtopic.php?p=75371#p75371
*Always* check the changelogs BEFORE updating that important software!
-
Post Reply