Some pop-under..

[nagan]

1.9.9.35
I came across in the changelog that pop-unders are managed. But whenever I type something in the search bar of Netp**n.nl there is the popunder of Live jasmine throwing up.

[Giorgio Maone]

http://hackademix.net/2010/01/06/noscri ... op-unders/ last paragraph.

[nagan]

http://hackademix.net/2010/01/06/noscri ... op-unders/ last paragraph.

Did that and boy did that work in the first case. Keying something in the search bar killed the pop-under.

Later pressing the button "Date added" to sequence the search result brought alive jasmin. So the problem 's still there.

[Giorgio Maone]

I can't reproduce your issue. I got no popup at all during the search/sort sequence, with ^http: as the source.

[nagan]

Can you be more specific with "^http: as the source" .I have added netporn.nl to the source list as directed. Say you search for eb0ny and get a list of clips. Then I press the date added button.I am getting live jasmine..Confirmed.

[Giorgio Maone]

Can you be more specific with "^http: as the source

The last paragraph in my blog post says:

However, since running this surrogate does not add more than one millisecond to your page loading and should not have any notable side effect, if you feel adventurous you can change the preference above into

@^http:

meaning that all the HTTP unencrypted web sites will enjoy pop-under immunity. If you experience problems with this setting (especially links which don’t react to your clicks even if Javascript is enabled) and they’re fixed by restoring the default, or just find a web site where pop-unders survive, please let me know.

It just mean you can erase all the web sites in the noscript.surrogate.popunder.sources preference and replace them with just ^http:.

I have added netporn.nl to the source list as directed. Say you search for eb0ny and get a list of clips. Then I press the date added button.I am getting live jasmine..Confirmed.

In facts, the landing page for a search is in the www.netporn.nl domain, which is not implied by "netporn.nl". If you want to be specific, you should add *.netporn.nl as well, but ^http: catches all.

[nagan]

WOW! That worked (*.netp**n.nl) . No more live jasmines from that site. Makes me wonder if at all popunder could be a legitimate tool in browsing (ie opening a window). Would you think about nuking a site's pop-unders from the context preference itself in the future?

Alternatively by default NS can nuke all popunders aka ^http. If a legit popunder seems to be killed the user can enable it from the context.

[nagan]

1.9.9.36
The changelog seems to suggest all Popunder brought under http. But about:config rules are the same. Also there is no mention of popunder in options.

[Giorgio Maone]

1.9.9.36
The changelog seems to suggest all Popunder brought under http. But about:config rules are the same.

The default value of noscript.popunder.sources has been changed to ^http:
If you've manually modified that value previously, you need to reset it to see the change.

[nagan]

I have done that thru about:config. But just to remind that NS came with some sites already listed in surrogate scripts.

[nagan]

With ^http enabled ,I found a popunder at sharingmatrix.com whilst downloading a not so decent file. But I could not find the cause.

[nagan]

Pop-under at sharingmatrix.com under free downloads after the Time-lapse , captcha ,at the moment you click the download.

[Giorgio Maone]

Yes, that one slips because it's not a generic "click anywhere on the document" popunder, but it's tailor-made, attached to a specific button.

However, to handle this and perhaps another bunch of "ad hoc" popunders you can change your noscript.surrogate.popunder.replacement about:config preference to

Code: Select all

var cookie=document.__proto__.__lookupGetter__('cookie');document.__proto__.__defineGetter__('cookie',function() { var c='; popunder=yes; popundr=yes';return cookie.apply(this).replace(c,'')+c;});var open=window.__proto__.open;window.__proto__.open=function(url,target,features){if(!(/^_(?:top|parent|self)$/i.test(target)||target in frames)){var suspSrc,frame,ff=[]; for(var f,ev,aa=arguments;(f=aa.callee.caller) && ff.indexOf(f)<0;ff.push(f)){aa=f.arguments;ev=aa[0];if(!suspSrc) suspSrc=/(?:\bpopunde?r|\bfocus|\bblur|[pP]uShown)\b/.test(f.toSource());if(ev instanceof MouseEvent && ev.type=='click' && ev.currentTarget===document){if(suspSrc){frame=document.body.appendChild(document.createElement('iframe'));frame.src='data:text/html,';frame.style.display='none';window.setTimeout(function(){frame.parentNode.removeChild(frame);},1000);var w=frame.contentWindow;w.blur=function(){};return w;}}}}return open.apply(this, arguments);};

which will be the default in next release.

[nagan]

Another one here http://www.badongo.com/cfile/11843942 as you fill the captcha.

NS9.47 ^http enabled in surrogate.

[nagan]

Suddenly having a lot of incidences of "livejasmine" popunders despite having enabled ^http in the popunder preferences.