Page 1 of 1

Settings: noscript checkbox

Posted: Tue Mar 19, 2024 11:58 pm
by harryray22
I was looking through the settings and I just noticed that in the default, trusted and untrusted section there is a checkbox for 'noscript'. What does that refer too? I'm a bit confused by it.

Thanks.

Re: Settings: noscript checkbox

Posted: Wed Mar 20, 2024 12:39 am
by barbaz
See the sticky - viewtopic.php?t=26285

Re: Settings: noscript checkbox

Posted: Wed Mar 20, 2024 12:57 pm
by harryray22
Thanks, to be honest I didn't really totally understand it.
In general, is allowing this OK and is it better to allow it , or does allowing it present a security risk of any kind?

Re: Settings: noscript checkbox

Posted: Wed Mar 20, 2024 3:03 pm
by barbaz
It's generally better to allow it since it helps sites degrade gracefully when scripts are disabled. The security risk would involve a <meta> refresh inside a <noscript> element redirecting you somewhere bad, but Firefox can intercept those: about:config > set accessibility.blockautorefresh to true.

NoScript defaults to allowing this in Default and Trusted presets, and disallowing it in Untrusted preset.