NoScripters and WebSec nerds of all lands, unite!
https://forums.informaction.com/
Yup. It is shown. This is the forum I was talking about. It is mostly in Russian, but you can get the idea. Try allowing all temporarily and watch the flash come to live and bring your pc to its knees. Hate that.Giorgio Maone wrote:Not sure about what you're meaning here.
Is the Flash animation from an external site (e.g. an advertising network)?
If so, even if you permanently allow the forum, the Flash animation shouldn't be shown.
Including all whitelisted sites is too global to be useful, but the ABE thing looks just what I wanted, thanks. So, how would I go about trusting everything except flash on a site? Something likeAt any rate, you may want to try NoScript Options|Embeddings|Apply these restrictions to whitelisted sites as well.
This may help too.
(just making that up).Site *.disput.az
Deny FLASH
Accept
It's more useful and usable than you may think: you'll get the "FlashBlock" effect, i.e. you will be shown placeholders for Flash stuff which you can click to start.rihad wrote: Including all whitelisted sites is too global to be useful, but the ABE thing looks just what I wanted, thanks. So, how would I go about trusting everything except flash on a site? Something like
Code: Select all
# This blocks Flash and other plugin objects served by dispute.az, turbo.az and subdomains
Site .dispute.az .turbo.az
Deny INC(OBJ)
# This blocks Flash and other plugin objects embedded in dispute.az pages
Site *
Deny INC(OBJ) from .dispute.az
Thank you so much, I didn't know NoScript cared where the objects came from, as long as they are on this site. Now everything's just how I wanted: everything allowed except plugins such as Flash.However, this rule would make ABE block any Flash on that site and from those domains:Code: Select all
# This blocks Flash and other plugin objects served by dispute.az, turbo.az and subdomains Site .dispute.az .turbo.az Deny INC(OBJ) # This blocks Flash and other plugin objects embedded in dispute.az pages Site * Deny INC(OBJ) from .dispute.az
You mean "applying these restrictions to whitelisted sites also"? So, with that option selected, the only thing NoScript allows for whiltelisted sites is JavaScript (and probably does some anti-CSRF)?It's more useful and usable than you may think: you'll get the "FlashBlock" effect, i.e. you will be shown placeholders for Flash stuff which you can click to start.
Correct. By "these restrictions", NoScript means those listed on that panel, i.e. embedding restrictions (Java, Flash, Silverlight, other plugins and possibly Frames and embeddable fonts).rihad wrote: You mean "applying these restrictions to whitelisted sites also"? So, with that option selected, the only thing NoScript allows for whiltelisted sites is JavaScript (and probably does some anti-CSRF)?