NoScript not working in Firefox - leaving me vulnerable

Ask for help about NoScript, no registration needed to post
friedchicken
Posts: 4
Joined: Tue Feb 08, 2022 8:03 pm

NoScript not working in Firefox - leaving me vulnerable

Post by friedchicken »

I'm running Mac OS X Mojave

Latest version of Firefox

running the following extensions: noscript, torrentconrol, ublock origin, downie, sponsorblock, return youtube dislike, facebook container.

I have no indication that noscript is working: no broken websites requiring js, no nothing.
I've tried individually disabling extensions, but no avail.

I'm sorry to just register and post here, what's not being posted is literally YEARS of flawless use and appreciation for this extension. There is no similar script blocker for safari, and it makes safari a dealbreaker for me.

Thank you for the help!
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:97.0) Gecko/20100101 Firefox/97.0
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: NoScript not working in Firefox - leaving me vulnerable

Post by Giorgio Maone »

Hi, could you please send me your NoScript Options>Export file for examination?
My email address (and PGP key) is on the top right of https://maone.net.
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:97.0) Gecko/20100101 Firefox/97.0
friedchicken
Posts: 4
Joined: Tue Feb 08, 2022 8:03 pm

Re: NoScript not working in Firefox - leaving me vulnerable

Post by friedchicken »

Just sent!
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:97.0) Gecko/20100101 Firefox/97.0
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: NoScript not working in Firefox - leaving me vulnerable

Post by Giorgio Maone »

friedchicken wrote: Tue Feb 08, 2022 8:41 pm Just sent!
Seen, and mistery probably solved: it seems you accidentally selected the "Disable restrictions globally (dangerous)" option. Just uncheck it in NoScript Options>General.
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:97.0) Gecko/20100101 Firefox/97.0
friedchicken
Posts: 4
Joined: Tue Feb 08, 2022 8:03 pm

Re: NoScript not working in Firefox - leaving me vulnerable

Post by friedchicken »

Giorgio Maone wrote: Tue Feb 08, 2022 9:36 pm
friedchicken wrote: Tue Feb 08, 2022 8:41 pm Just sent!
Seen, and mistery probably solved: it seems you accidentally selected the "Disable restrictions globally (dangeros)" option. Just uncheck it in NoScript Options>General.
Weird that I didn't notice this. I've never touched those settings.
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:97.0) Gecko/20100101 Firefox/97.0
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: NoScript not working in Firefox - leaving me vulnerable

Post by Giorgio Maone »

friedchicken wrote: Wed Feb 09, 2022 2:41 am
Giorgio Maone wrote: Tue Feb 08, 2022 9:36 pm
friedchicken wrote: Tue Feb 08, 2022 8:41 pm Just sent!
Seen, and mistery probably solved: it seems you accidentally selected the "Disable restrictions globally (dangeros)" option. Just uncheck it in NoScript Options>General.
Weird that I didn't notice this. I've never touched those settings.
You might accidentally enable it from the popup as well, it's the "S" button with the exlamation mark (S!). You can hide it by drag & drop if you're afraid to hit it again.
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:97.0) Gecko/20100101 Firefox/97.0
musonius
Master Bug Buster
Posts: 204
Joined: Sun Jul 08, 2018 5:38 pm

Re: NoScript not working in Firefox - leaving me vulnerable

Post by musonius »

There are so many cases where people accidentally set the "Disable restrictions globally (dangerous)" option. What's the reason for not making it temporary?
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:97.0) Gecko/20100101 Firefox/97.0
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: NoScript not working in Firefox - leaving me vulnerable

Post by Giorgio Maone »

musonius wrote: Wed Feb 09, 2022 8:08 am There are so many cases where people accidentally set the "Disable restrictions globally (dangerous)" option. What's the reason for not making it temporary?
I'm rather thinking of making it more obvious (e.g. by disabling all the per-site permissions UI in the popup as well, when it's checked), and maybe adding a confirmation prompt with the option to make it either session-temporary or permanent.
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:97.0) Gecko/20100101 Firefox/97.0
friedchicken
Posts: 4
Joined: Tue Feb 08, 2022 8:03 pm

Re: NoScript not working in Firefox - leaving me vulnerable

Post by friedchicken »

Something to indicate this is the case would be *very* helpful.

It could also be useful that I can still set the permissions, so I can use noscript with all my webpages working, but still go through and click what I want to allow/disallow, then when I re-enable it, not deal with the hassle.
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:97.0) Gecko/20100101 Firefox/97.0
musonius
Master Bug Buster
Posts: 204
Joined: Sun Jul 08, 2018 5:38 pm

Re: NoScript not working in Firefox - leaving me vulnerable

Post by musonius »

Giorgio Maone wrote: Wed Feb 09, 2022 11:20 am I'm rather thinking of making it more obvious (e.g. by disabling all the per-site permissions UI in the popup as well, when it's checked), and maybe adding a confirmation prompt with the option to make it either session-temporary or permanent.
I think that would be perfect! 👍
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.80 Safari/537.36 Edg/98.0.1108.43
aarno
Posts: 6
Joined: Tue Feb 22, 2022 6:04 am

Re: NoScript not working in Firefox - leaving me vulnerable

Post by aarno »

I too have been caught out by the "Disable Restrictions Globally" feature and I could have sworn that NoScript used to warn you vigorously NOT TO DO THIS, DO SO AT YOUR OWN RISK.

But I never received such a warning when I (possibly) accidentally clicked this option.

Anyway, I would be all for a giant pop up box or some sort of warning tell me to not do this, as the cases for doing so are very few and far between for the majority of average users, I feel.

Thanks for the great product

It is much appreciated.

If I have a good lottery win, you will be one of the first to no about it.
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:97.0) Gecko/20100101 Firefox/97.0
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: NoScript not working in Firefox - leaving me vulnerable

Post by Giorgio Maone »

aarno wrote: Wed Feb 23, 2022 2:23 pm Anyway, I would be all for a giant pop up box or some sort of warning tell me to not do this, as the cases for doing so are very few and far between for the majority of average users, I feel.
Done in latest development build, thanks:
v 11.3.4rc2
============================================================
x Avoid closing the customizer on arrow up key context
selection change (thanks barbaz for reporting)
x Prominently warn user whenever restrictions are disabled
x Support icon buttons elsewhere in the UI (e.g. in the
messagebox)
x Support for selectively hiding messages
x Support for extra UI in the popup's message box
x Prevent popup closure and automatic reload when
restrictions are disabled for the tab or globally
x Use a 5 seconds timeout to remotely fetch HTML events
source
x Better accessibility and styling for popup global buttons
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:98.0) Gecko/20100101 Firefox/98.0
aarno
Posts: 6
Joined: Tue Feb 22, 2022 6:04 am

Re: NoScript not working in Firefox - leaving me vulnerable

Post by aarno »

Giorgio Maone wrote: Fri Feb 25, 2022 11:14 am
aarno wrote: Wed Feb 23, 2022 2:23 pm Anyway, I would be all for a giant pop up box or some sort of warning tell me to not do this, as the cases for doing so are very few and far between for the majority of average users, I feel.
Done in latest development build, thanks:
v 11.3.4rc2
============================================================
x Avoid closing the customizer on arrow up key context
selection change (thanks barbaz for reporting)
x Prominently warn user whenever restrictions are disabled
x Support icon buttons elsewhere in the UI (e.g. in the
messagebox)
x Support for selectively hiding messages
x Support for extra UI in the popup's message box
x Prevent popup closure and automatic reload when
restrictions are disabled for the tab or globally
x Use a 5 seconds timeout to remotely fetch HTML events
source
x Better accessibility and styling for popup global buttons
Thank you so very much

It and your efforts are greatly appreciated
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:97.0) Gecko/20100101 Firefox/97.0
aarno
Posts: 6
Joined: Tue Feb 22, 2022 6:04 am

Re: NoScript not working in Firefox - leaving me vulnerable

Post by aarno »

I also like to add that the "Drop to Hide" function is extremely helpful as well to assist in avoiding accidentally enabling the buttons of doom.

👍🏼👍🏼
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:97.0) Gecko/20100101 Firefox/97.0
ede

Re: NoScript not working in Firefox - leaving me vulnerable

Post by ede »

Giorgio Maone wrote: Wed Feb 09, 2022 11:20 am I'm rather thinking of making it more obvious
I definitely second this idea. And there's two things I think would really be helpful:
  • Unequalize the icons. Now they are "S+!" "BOX+!" "Clock+!" "Clock+(\)". I still have to hover them to know which one to press. Talking about mouse:hover…
  • Straighten the text. "Disable restrictions globally". Both are negative expressions. "Unenable" "not allowed things". Minus multiplied with minus is plus, correct? But it's "allow everything" after all. Intuitivity rules in UI design (and consistence, but yeah). Just like it is for "trust everything on this site/page¹".
Btw, i'm still using the traditional design, the new one is hard to use.
________
¹ German interface here, so expressions may vary, maybe not even follow the same logic.
Mozilla/5.0 (X11; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/85.0
Post Reply