Page 1 of 1
inline scripts aren't block: why & workaround?
Posted: Mon Mar 26, 2018 9:02 pm
by bobybob
I just realized that inline scripts are not blocked by NoScript, which I find rather unsettling. If one does not trust scripts from
then surely this applies to external
and inline scripts?
My questions are,
* why is it the case? It is purely a technical reason?
* is there a workaround?
Thanks
Re: inline scripts aren't block: why & workaround?
Posted: Mon Mar 26, 2018 9:43 pm
by GµårÐïåñ
If a page is not granted `ALLOWED` then scripts do not run, that could be first-party or third-party the distinction is SCRIPT so are you sure you don't have the site itself or as part of a domain wildcard allowed scripting permission?
Do you have an actual link where this happens so we can test it? Unfortunately hypothetical lack the technical information needed to test it. It can very well be a technical limitation, a bug or misconfiguration but we have no way to actually test it without an actual link where this occurs.
It would also be helpful to now your Firefox and NoScript versions and your platform (Windows, Mac, Linux, etc) and version.
Re: inline scripts aren't block: why & workaround?
Posted: Mon Mar 26, 2018 10:04 pm
by Giorgio Maone
Did you by any chance change the DEFAULT preset to include the "script" capability?
Otherwise, could you share your NoScript Options>Export file to see what's going on?