New urls appear to be allowed by default

[aldiboronti]

I happened to notice on a board that I regularly use and for which I've had NoScript permissions set for ages that a new one had appeared, something called gumgum.com. What concerned me though is that gumgum was allowed by default. If I hadn't been checking permissions for that page for something else I would have completely missed this newcomer.

Does this mean that you need to constantly check all your permissions for each site to watch out for additions or have I simply missed something in originally setting NoScript up?

[barbaz]

Have you set "Temporarily allow top-level sites by default" or similar option?

If not, scan your system for malware per General Troubleshooting Instructions #2.

[Thrawn]

It's an advertising platform. Besides the possibility of malware, could it be bundled with another extension that you've installed?

[aldiboronti]

Checked for malware, none found. But I think I've found the problem. I just checked my whitelist and it was way bigger than I thought. I think what's been happening is that I've been allowing sites and then forgetting to revoke permissions afterwards. Just pruned my whitelist to the essentials. Tell me, if I temporarily allow sites do I have to specifically revoke temporary permissions afterwards or is it done automatically when you leave the page?

[barbaz]

Tell me, if I temporarily allow sites do I have to specifically revoke temporary permissions afterwards or is it done automatically when you leave the page?

Temporary permissions automatically expire when the browser is closed or history is cleared.

I think what's been happening is that I've been allowing sites and then forgetting to revoke permissions afterwards.

Unless you never clear history nor quit/restart your browser, that wouldn't explain it.

Does it require login to reproduce this? -

I happened to notice on a board that I regularly use and for which I've had NoScript permissions set for ages that a new one had appeared, something called gumgum.com.

If not, link to that board please?