Page 1 of 1

"Allow Scripts globally" versus de-activating the plugin

Posted: Tue Dec 01, 2009 5:36 pm
by toralf
Hello,

even if I de-activate noscript from Firefox 3.5 menue (Tools->Add-ons) at my stable Gentoo system, the web front end of my home bank doesn't work well.

If however I check the option "Allow local links" under Options->Advanced->Trusted of noscript it works.

I'd really expect, that de-activating no-script w/ right mouse click and "Allow Scripts globally" should give the same behaviour than de-activating it from the firefox menue, isn't it ?

Re: "Allow Scripts globally" versus de-activating the plugin

Posted: Tue Dec 01, 2009 5:47 pm
by Giorgio Maone
toralf wrote:I'd really expect, that de-activating no-script w/ right mouse click and "Allow Scripts globally" should give the same behaviour than de-activating it from the firefox menue, isn't it ?
Nope, "allow scripts globally" just does that (allowing active content anywhere) but keeps some important protections in place (e.g. anti-XSS, HTTPS enforcement and ClearClick).
toralf wrote:If however I check the option "Allow local links" under Options->Advanced->Trusted of noscript it works.
Then I don't expect it to work even if you disable NoScript, since "local links" are normally disabled by the built-in Firefox security, independently from NoScript (which gives you a way to enable them on trusted sites).

Re: "Allow Scripts globally" versus de-activating the plugin

Posted: Wed Dec 02, 2009 5:50 pm
by toralf
I can reproduce the behaviour with the current version of NoScript and an old backup of my .mozilla directory.
If wanted I can provided the exported settings (text files) of the non-working and the working settings, the later I got after I pressed the Reset button of Noscript.