Page 1 of 4

Firefox 57 and NoScript 10.1.2

Posted: Thu Nov 23, 2017 3:50 am
by dinosnake
Hi!

The latest update, NS 10.1.2, does not remember permission settings - as soon as you close the NS menu the permissions are forgotten, with the page also failing to reload. Clicking on NS, again, shows the permissions as not set. Unless you select Temporarily Allow All, all permissions are therefore locked out and the browser is, therefore, highly restricted.

Tried uninstalling NS and restarting FF, both several times. No change.

Also, if I may:

Only showing base domains, with no option for user preference on an override, is a problem. On a page where NS states that it has blocked 21 permissions, only having 5 actually show up for permission selection causes major problems.

Having to double-click to set a Temporary permission (once on Trusted, the second time on the clock) is a major downgrade versus the wonderful, classic NS 5.x interface. For example, I never used Allow (permanent) and disabled this from my NS dropdown menu; the selections available in my NS dropdown menu were exclusively Temporarily Allow and Forbid [Temporary], Temporarily Allow All and Revoke [All]. That's it. I even wiped my whitelist. NS 10.1.x, so far, does not allow this customization.

Thank you.

Re: Firefox 57 and NoScript 10.1.2

Posted: Thu Nov 23, 2017 4:42 am
by joe786
I had trouble getting 10.1.2 to remember the settings for ESPN.com. I would mark it as trusted and then manually refresh the page. It would revert to default immediately after reload. I finally got it to work by switching the lock from green to red right after I marked it trusted.

Re: Firefox 57 and NoScript 10.1.2

Posted: Thu Nov 23, 2017 9:09 am
by dna
Same here. After the update to 10.1.2, permissions changed via the menu dialog are reset immediately. But the URLs seems to be stored as trusted in the settings page, however, scripts are still blocked. I deactivated all other addons but the problem persists. Also, I started with a fresh firefox profile the last days, so corrupted preferences are not very likely.

Re: Firefox 57 and NoScript 10.1.2

Posted: Thu Nov 23, 2017 9:56 am
by Guest
all the above,
plus i'm getting xss warning on imdb.com and also on Google with the the search term "windows.name".

Re: Firefox 57 and NoScript 10.1.2

Posted: Thu Nov 23, 2017 10:25 am
by Guest
it doesn't refresh after i temporarily allow a few elements(not the whole page),
and on some site i can get like the number 20 on the count icon,but i can only change a few.

Re: Firefox 57 and NoScript 10.1.2

Posted: Thu Nov 23, 2017 11:08 am
by useruser
I'm having all the same problems as above. The last update needs to be rolled back asap.

Re: Firefox 57 and NoScript 10.1.2

Posted: Thu Nov 23, 2017 11:17 am
by modus
I am also having few problems with v.10.1.x and FF57 but having in mind the circumstances and specially after seeing the latest comments on the "official" Mozilla review page I just wanted to post here to show my support to the add-on and all people behind it.

It is amazing how selfish and stupid people are this days. No appreciation for anything beyond their own little world and needs...no wonder why society is a pile of crap for the most part. Well, maybe that is the goal...

I would like to send some btc. This address would do?

1Kupnx5isBdAJ5ki2BEVF6sBuYmkYigWPU

Please keep up the good work and thanks a lot for this add-on.

Re: Firefox 57 and NoScript 10.1.2

Posted: Thu Nov 23, 2017 1:47 pm
by barbaz
modus wrote:I would like to send some btc. This address would do?
https://hackademix.net/2015/02/06/noscr ... donations/

Yes, that one.

On behalf of Giorgio, thank you for your donation! Image

Re: Firefox 57 and NoScript 10.1.2

Posted: Thu Nov 23, 2017 2:18 pm
by Sebastian
I'm having all the same problems.

In addition, NoScript comes with a lot of sites preconfigured to "Default", where the default settings allow scripts. I'd like the default to be "untrusted", but there seems to be no way to configure this (in contrast to the old NoScript).

Re: Firefox 57 and NoScript 10.1.2

Posted: Thu Nov 23, 2017 2:19 pm
by barbaz
Sebastian wrote:In addition, NoScript comes with a lot of sites preconfigured to "Default", where the default settings allow scripts. I'd like the default to be "untrusted", but there seems to be no way to configure this (in contrast to the old NoScript).
Just configure the Default preset to have same permissions as Untrusted:
1) Go to NoScript Options
2) Set a site to Default
3) Click the gear that appears when you mouse over that site's "Default" permissions
4) Un-check everything

Re: Firefox 57 and NoScript 10.1.2

Posted: Thu Nov 23, 2017 3:24 pm
by n0mad
useruser wrote:I'm having all the same problems as above.
Same problems here, even if with well-known sites like imdb.com , rockettheme.com and many others. NoScript doesn't save permissions when I set them for some sites.

Re: Firefox 57 and NoScript 10.1.2

Posted: Thu Nov 23, 2017 3:52 pm
by whatnow
I am having the same problem. I tried the barbaz 4 step fix but that did not help. When I set this site it worked but when I tried a site I had tried earlier it did not work.

Please keep working on the bugs. Thank you for all the time you have put in to get NoScript to work on FF 57. If I could only have one add on it would be NoScript.

Re: Firefox 57 and NoScript 10.1.2

Posted: Thu Nov 23, 2017 3:56 pm
by bobblebob
If a script or site wont remember the setting, toggle the lock icon (from red to green or green to red) this seems to force it to remember the setting

Re: Firefox 57 and NoScript 10.1.2

Posted: Thu Nov 23, 2017 3:57 pm
by Ralph
After setting them to trusted, you should switch the green Lock-icon to the red state, because otherwise the trusted is only matched for the https: address, and when the site doesn't have https: in its address, the site will NOT be considered as trusted, and so it switches to Default state. I mentioned this effect also in an other thread ( https://forums.informaction.com/viewtop ... 998#p91998 ), so i hope it will be considered in the next update.

Re: Firefox 57 and NoScript 10.1.2

Posted: Thu Nov 23, 2017 5:32 pm
by joe786
It seems like the red/green lock is just more trouble than it's worth. If you trust a site, you trust a site. Why would https and non-https make a difference?