"Allow Full Addresses" not working properly?

[dhouwn]

I am on a site https://www.example.org which apparently dynamically includes content from the domain https://example.org and even if I configure NoScript to just show "Full Addresses (http://www.noscript.net)" in the contextual menu, it just offers me to allow "example.org" (no protocol), is this a bug?

NoScript 2.1.2.5rc1 on yesterday's Aurora build.

[therube]

(Wasn't FF dumbing down the URL line, dropping http: or something?)

[Giorgio Maone]

Did you already allow https://www.example.org ?
If you did and the document "upgrades" its domain by using something like

Code: Select all

document.domain = "example.org";

then NoScript's behavior is the expected one.

[dhouwn]

First of all, the site in question is Facebook, which apparently nobody can evade joining now (just some days ago I spotted that even the garbage collection services advertise for their FB page on their trucks now ).

Did you already allow https://www.example.org ?

Yes, I did.

If you did and the document "upgrades" its domain by using something like

Code: Select all

document.domain = "example.org";

Indeed it seems to do something like that:

Code: Select all

document.domain=window.location.hostname.replace(/^.*(facebook\..*)$/i,'$1')

then NoScript's behavior is the expected one.

Ah, OK. Thanks.