Page 1 of 1

ABE issue (sandbox) with NoScript 2.9.5.3rc6

Posted: Thu Jan 26, 2017 10:37 am
by johnscript
Following the advice given in this thread ABE seems to be broken since the latest release [2.9.5.1] I've first added the line

Code: Select all

Accept from chrome: moz-nullprincipal:
right after the Site .mysite.com line, then tried to change it to

Code: Select all

Sandbox from chrome: moz-nullprincipal:

- and it worked in 2.9.5.2 with no issues that I was aware of.

However, this doesn't work anymore in NoScript 2.9.5.3 and 2.9.5.3rc6 : the sandbox rule posted above basically breaks the temporary allow function of NoScript, that line now has to be either

Code: Select all

Accept from chrome: moz-nullprincipal:
or

Code: Select all

Anon from chrome: moz-nullprincipal:
because when using sandbox no website can be allowed - for instance when clicking temporary allow noscript.net it allows https://noscript.net but leaves another entry in the menu icon http://noscript.net that can' t be allowed.

Is this a bug, or is it actually wrong to substitute sandbox for accept in that line?

Speaking of which, will the need for such workaround be removed at some point, or will this be needed from now on ?

Re: ABE issue (sandbox) with NoScript 2.9.5.3rc6

Posted: Thu Jan 26, 2017 6:11 pm
by barbaz
It's not a bug. ABE Sandbox didn't do anything at all in 2.9.5.2.

Re: ABE issue (sandbox) with NoScript 2.9.5.3rc6

Posted: Sat Jan 28, 2017 3:48 pm
by johnscript
Just to be clear, what we are saying here is that sandbox in NoScript 2.9.5.2 didn't really do anything?

And consequently every Sandbox rule in 2.9.5.2 was actually equivalent to Accept?

If so, I would gather that the behaviour described above with 2.9.5.3 is the intended one, as Sandbox from chrome: moz-nullpricipal: will basically deny scripts for the current website, correct?

Re: ABE issue (sandbox) with NoScript 2.9.5.3rc6

Posted: Sat Jan 28, 2017 5:05 pm
by barbaz
All correct.