Page 1 of 1

Domain no longer listed after site gets script-allowed

Posted: Sun Feb 20, 2022 3:17 pm
by barbaz
NoScript 11.3.3rc4
Firefox 97.0
new profile

Test page -

Code: Select all

<!doctype html>
<script src="./foo1.js"></script>
<script src="https://********.test/***/foo2.js"></script>
foo1.js

Code: Select all

document.write('<code>Same origin script</code>');
foo2.js

Code: Select all

document.write('<code>Cross-origin script</code>');
When the test page is script-blocked, everything works as expected. When the test page is script-allowed, the cross-origin domain no longer shows up in the NoScript popup. NoScript icon shows Image even if the cross-origin domain is not script-allowed.

Well, I reproduced this once in a new profile, but after a reload it consistently works as expected? Reloading doesn't help in my main profile.