InformAction Forums

NoScript blocks about:blocked when I visit http://www.mozilla.com/firefox/its-an-attack.html. I don't see any reason why it shouldn't be Allowed. Is there a reason it's not in the default whitelist?

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3
NoScript 1.9.9.11

It's not blocked, in facts. It's just not whitelisted, therefore it shows up as blocked. I'm adding it to the "mandatory" whitelist, together with about:config, about:neterror, chrome: and a few others.

Thank you.

That's funny. I don't have it whitelisted and it doesn't block anything. What exactly is it blocking?

GµårÐïåñ wrote:That's funny. I don't have it whitelisted and it doesn't block anything. What exactly is it blocking?

As I said, it's not blocking anything.
Some URLs (e.g. chrome:, about:neterror or about:blocked) are internally flagged as "safe" and don't undergo CAPS check.
Therefore Javascript works there no matter if they're whitelisted or not.
Adding them to the "mandatory" whitelist is a cosmetic enhancement, to prevent NoScript from wrongly report them as blocked and create confusion.
Another option would be check the "safe" flag at runtime, but it's too expensive performance-wise and not worth the effort.

Ok, gotcha. Thanks.