InformAction Forums

Hello, I see Firefox writing to NoScriptSTS.db while being in Private mode. Prior to Firefox 4, NoScript did not write to the file but that might be because STS wasn't supported.

Giorgio mentions here that there shouldn't be any persistence, so could this be a bug?

Further, now that Firefox has built-in STS support is there any downside to setting noscript.STS.enabled to false?

Thanks.

Guest wrote:Hello, I see Firefox writing to NoScriptSTS.db while being in Private mode.

Does it actually write out any site there?
If it does, that's a bug.

Guest wrote: Further, now that Firefox has built-in STS support is there any downside to setting noscript.STS.enabled to false?

No, at least if you use both (if you disabled built-in support, you can use exceptions to override NoScript's STS).
Actually I'll probably disable NoScript's support by default on a future release when built-in support is detected.

Giorgio Maone wrote:Does it actually write out any site there?

The NoScriptSTS.db file was always there but it was a 0 byte file. Yes, data is being written to the file. Turning NoScript STS off stops the writing.