Page 1 of 1
Why about:blank if is allowed?
Posted: Fri Jan 15, 2010 10:18 pm
by turson
Hi forumers, yes that question, Why about:blank is enabled in the NoScript's default settings??
PD: For test, I returned to its default settings, after a long time. Is this unwise?
Re: Why about:blank if is allowed?
Posted: Fri Jan 15, 2010 10:27 pm
by Giorgio Maone
Because from time to time a few compatibility issues (mostly if not exclusively with extensions) have surfaced involving about:blank being forbidden, and because there's no security risk associated to having it allowed.
Re: Why about:blank if is allowed?
Posted: Fri Jan 15, 2010 10:48 pm
by turson
Re: Why about:blank if is allowed?
Posted: Fri Jan 15, 2010 10:56 pm
by Giorgio Maone
Irrelevant: for this (and other about:blank-related exploits), JavaScript needs to be enabled on the
web page launching the attack (which of course is different than about:blank, an empty page by definition).
Re: Why about:blank if is allowed?
Posted: Fri Jan 15, 2010 11:23 pm
by turson
Concerning default options: ¿Why gstatic.com and googlesyndication.com are allowed?
Thanks

.
Re: Why about:blank if is allowed?
Posted: Fri Jan 15, 2010 11:31 pm
by Giorgio Maone