InformAction Forums

Hi

I would like to request a new option for 'Forbid Adobe PDF' restriction to the 'Embeddings' NoScript Options. It should be part of the existing group 'Additional restrictions for untrusted sites'.

I am wanting to reduce a two-step process of opening PDF files to one. On the sites that I visit, PDF files are 'clicked' to be opened taking the first step. No problem. But then NoScript always asks for confirmation making the opening of a PDF file a two-step process.

I visit a lot of sites and view a lot of PDF files. The two-step process is annoying as I have already agreed to open the file by clicking on it. Adobe Flash is different as it automatically runs on loading a webpage but Adobe PDF files are not automatically opened. At least I have not seen a website that does. For the scenario where, say, loading a weblink directly into a browser that references a PDF file, then a confirmation should confirm the opening of the PDF file. Again this should be kept to one step but not two.

There is already an option on this page for 'Forbid Adobe Flash'. Excellent. I would like the option for 'Forbid Adobe PDF' immediately under it. Then I will deselect it.

Are there any reasons why this would be a bad idea to implement?

From http://noscript.net/features:

You can configure some exception to the Forbid Other Plugins option by setting the noscript.allowedMimeRegExp about:config preference to a pattern matching the content types you want to allow. For instance, setting it to "application/pdf" will let PDF document load automatically on every site. That said, are you sure you need to? Adobe Acrobat Reader plugin got its share of vulnerabilites so far, and after all, you can still allow individual PDF documents from untrusted sites just clicking on their placeholders.

Have you tried that yet?

Thanks Alan for your response.

No I have not tried it. But I will. I should have looked more thoroughly across the website before posting.

You're welcome.

csalsa wrote:I should have looked more thoroughly across the website before posting.

No problem, no problem at all. It's easy to miss.