Page 1 of 1

Disabling the "Allow Scripts Globally" feature for good?

Posted: Tue Apr 20, 2010 11:50 pm
by Gotera
Ok, so I've installed NoScript on a person's computer along with other security enhancing programs. Much to my disappointment, when I come back to check on their computers and run maintenance I more often than not find that they've set NoScript to "Allow Scripts Globally." I think it's their kids or someone else doing it, as I've told the owner of the PC never to do that and they know to only allow scripts temporarily. Another person guilty of this is my mom who doesn't know what she's doing, and allows scripts globally out of frustration and never remembers to change it back.

Is there any way I can modify the NoScript files to remove that option from the right-click menu? Or perhaps entirely? I know what sites they regularly visit, and so I know they're at risk if this behavior continues. So for their own good, I'd like to bust into the NoScript files and make an edit here or there to take away that feature.

I've done a lot of hex edits, registry edits, and other kinds of file manipulation before, so if someone could walk me through how to do this (if possible), I should be able to do it. Really it should be as simple as removing the line of code that adds the "Allow Scripts Globally" option to the right-click menu, right?

Re: Disabling the "Allow Scripts Globally" feature for good?

Posted: Wed Apr 21, 2010 12:02 am
by Giorgio Maone
Just uncheck NoScript Options|Appearance|Allow scripts globally (dangerous).
Furthermore, you can switch the noscript.tempGlobal about:config preference to false, so scripts get globally forbidden again every time you restart your browser.

Re: Disabling the "Allow Scripts Globally" feature for good?

Posted: Wed Apr 21, 2010 12:15 am
by Gotera
Ah, thanks, it turns out it was quite simple after all! I just changed the tempglobal setting, too. This should put a stop to the "drop defenses to browse dangerous sites" behavior for now.
Though, now I'm wondering if they'll figure out how to allow scripts globally via the options menu, or if they'll figure out how to disable NS entirely. It would be nice if I could password-protect NoScript's settings somehow.