Page 1 of 1

[RESOLVED] Some security with "Allow Scripts Globally"

Posted: Fri Nov 13, 2009 4:00 am
by ???
Posting this here because: is it a support question or a feature request question?? (depends on the answer!)

Installed NoScript on a relative's new computer and she can't handle it. No patience. She wants to surf with no effort on her part. It's really looking like I may have to allow scripts globally (ack!) in order to at least keep the *other* NoScript protections in place. So here's the question: is there any way to allow scripts globally EXCEPT for sites listed as untrusted? Already have a large number of untrusted along the lines of google analytics -- sites that there's no way she will ever have cause to make trusted (especially with the NoScript surrogate scripts)--and it would be really great to have a way to keep these sites' locked up even while opening up the rest of the web to, well, whatever…

Re: Some security with "Allow Scripts Globally"

Posted: Fri Nov 13, 2009 5:09 am
by Alan Baxter
If I recall correctly, sites marked untrusted aren't allowed even in Globally Allowed mode. It should be easy for you to check.

Re: Some security with "Allow Scripts Globally"

Posted: Fri Nov 13, 2009 8:27 am
by Giorgio Maone
Yes, when you use "Allow scripts globally", whatever you forbid from then on is automatically marked as untrusted and prevented from running.
In other words, you go in "Blacklist Mode". It's like YesScript, but with much more protection features (anti-XSS, anti-Clickjacking, ABE and so on).

Re: Some security with "Allow Scripts Globally"

Posted: Fri Dec 04, 2009 8:46 pm
by ???
Thanks!
Sorry it took so long to respond...