Page 1 of 1
Settings: noscript checkbox
Posted: Tue Mar 19, 2024 11:58 pm
by harryray22
I was looking through the settings and I just noticed that in the default, trusted and untrusted section there is a checkbox for 'noscript'. What does that refer too? I'm a bit confused by it.
Thanks.
Re: Settings: noscript checkbox
Posted: Wed Mar 20, 2024 12:39 am
by barbaz
Re: Settings: noscript checkbox
Posted: Wed Mar 20, 2024 12:57 pm
by harryray22
Thanks, to be honest I didn't really totally understand it.
In general, is allowing this OK and is it better to allow it , or does allowing it present a security risk of any kind?
Re: Settings: noscript checkbox
Posted: Wed Mar 20, 2024 3:03 pm
by barbaz
It's generally better to allow it since it helps sites degrade gracefully when scripts are disabled. The security risk would involve a <meta> refresh inside a <noscript> element redirecting you somewhere bad, but Firefox can intercept those: about:config > set accessibility.blockautorefresh to true.
NoScript defaults to allowing this in Default and Trusted presets, and disallowing it in Untrusted preset.