[RESOLVED] NoScript blocking hosts from whitelisted domain

[Bostic]

Hi,

I have ctv.ca as a whitelist; however, at http://watch.ctv.ca/news/, http://esi.ctv.ca is not allowed, forcing me to have to explicitly allow it via the status bar pop-up menu. The setting, however does not persist (even if "Allow..." and NOT "Temporary allow..." is the choice) between browsing sessions and must be redone each time. Attempts to explicitly whitelist esi.ctv.ca, http://esi.ctv.ca, or any form of subdomain.ctv.ca, is rejected (and understandably so), because ctv.ca is already in the list.

The same thing happens with msn.com. Even though it is in my whitelist, when I launch the video player, I notice that http://www.msnbc.msn.com is blocked.

NoScript 1.9.9.14; Firefox 3.7a1pre; Win XP

Thanks

[Tom T.]

http://esi.ctv.ca is not a valid link. Error and forbidden messages appear. I'm assuming that your wish is to watch the news, and so will answer that issue.

This is yet another one of those sites that when you allow one script or domain, that one will try to load new scripts. Then that one loads more ... it seems to be an unfortunate trend. Try whitelisting muchmusic.com. That made the blocked Flash object (the news) appear.

Since the video itself is a Flash object, your choices here are:

to uncheck "Forbid Flash";

to uncheck "Apply these restrictions to trusted sites too" ;

to click the Flash placeholder (red NoScript block-logo) or to click the green "blocked object" in the Menu, and click "Temporarily allow shockwave-flash@http://watch.ctv.CA....." etc.

The third option is by far the safest, since you are not granting blanket permissions to all other whitelisted sites, and IMHO, worth the slight inconvenience.

Site-specific permissions (Allow Flash @ ctv.ca) and other specific, permanent permissions are planned for the next generation of NoScript, 2.x, ETA presently unknown. This will add a great deal of convenience, to be sure. The long-running thread on that topic is http://forums.informaction.com/viewtopic.php?f=10&t=415.

Hope this helps.

[Bostic]

Yes I know http://esi.ctv.ca is not meant to be accessed directly and is called by one of the objects. It's just one of the hosts I would have assumed should have be allowed when I allowed the parent domain ctv.ca.

Thanks for info. I guess I'll have to wait and see what future releases bring.

[Tom T.]

Yes I know http://esi.ctv.ca is not meant to be accessed directly and is called by one of the objects. It's just one of the hosts I would have assumed should have be allowed when I allowed the parent domain ctv.ca.

Unfortunately, that's the site's choice, and you or I can't control that. (Not a bug in NoScript.)

Assuming that you're successfully watching the news, may the topic be marked as resolved for now? Thanks for letting us know.

[Bostic]

...may the topic be marked as resolved for now?

Sure

[Tom T.]

Done, thanks.