inline scripts aren't block: why & workaround?

[bobybob]

I just realized that inline scripts are not blocked by NoScript, which I find rather unsettling. If one does not trust scripts from

Code: Select all

example.com

then surely this applies to external and inline scripts?

My questions are,
* why is it the case? It is purely a technical reason?
* is there a workaround?

Thanks

[GµårÐïåñ]

If a page is not granted `ALLOWED` then scripts do not run, that could be first-party or third-party the distinction is SCRIPT so are you sure you don't have the site itself or as part of a domain wildcard allowed scripting permission?

Do you have an actual link where this happens so we can test it? Unfortunately hypothetical lack the technical information needed to test it. It can very well be a technical limitation, a bug or misconfiguration but we have no way to actually test it without an actual link where this occurs.

It would also be helpful to now your Firefox and NoScript versions and your platform (Windows, Mac, Linux, etc) and version.

[Giorgio Maone]

Did you by any chance change the DEFAULT preset to include the "script" capability?
Otherwise, could you share your NoScript Options>Export file to see what's going on?