Page 1 of 1

Option to allow/block *individual* scripts within a website

Posted: Mon Mar 22, 2010 1:28 am
by dvd
Hello.

I'm really loving noscript since discovering it the other day, as I'm a bit of a paranoid freak and thus enjoying (no matter how small) the increases in safety offered by it :).

What I'm really wanting, (and I'm sure this has been asked before and probably thought over), is the ability to allow/block *individual* scripts within a site, not just either blocking the *whole* site, or allowing *everything* from it. There may be only one script that I need to use on a site but the other 17 I'd rather not trust since I don't know what they are and don't seem to need them ;).

Is this already possible but somewhere in the settings I'm not seeing, and if not is it feasible to implement in some way (even if as an advanced option)? It appears we can do what I'm looking for with objects, but not scripts.

Thanks for reading and I look forward to the response :).

cheers!
dvd

Re: Option to allow/block *individual* scripts within a webs

Posted: Mon Mar 22, 2010 10:40 am
by Giorgio Maone
Mozilla's ScriptSecurityManager and therefore NoScript work at the site-wide level.
However you can use ABE to tweak requests at the file level.

Re: Option to allow/block *individual* scripts within a webs

Posted: Mon Mar 22, 2010 3:12 pm
by dvd
Hi, thanks for the answer.

Shame ScriptSecurityManager only works at a site-wide level.

Now, I'm a bit of a noob. From reading the ABE page, it seems very useful in what it does. The problem is that one must foreknow what to block or allow before manually entering it in.

And cos I'm a noob and don't know enough to work it out, can you actually define *any* individual script you might find on a page, in ABE?

Is there any chance that NoScript might one day be able to break up the list of scripts on the page you're on and for each script, allow you to click a deny/accept button in the interface which will automatically create an ABE rule for that script for that domain (or for any domain, perhaps as another option)? Is that how an accessible GUI method for doing this would work?

Thanks for the help. :)
dvd