InformAction Forums

Hello guys,

I´ve been looking for a function to allow or temporarily allow a site only for a selected, active tab, not generally.

If, for example, I´ve blocked a site generally but would like to view a .pdf from this site in a seperate tab in my browser,

I´d like to allow this site ONLY in this (new or seperate) tab and not for other tabs regarding the server; they should remain "blocked".

Is that possible/easy to implement and would it be useful for other noscript users?

Best regards,

-Stefan.

If, for example, I´ve blocked a site generally but would like to view a .pdf from this site in a seperate tab in my browser

Do you have a specific site in mind, and what .pdf reader are you using?

I have one site I visit fairly frequently, where I do not allow any scripting at all, but either open or download the latest .pdfs. I have Foxit reader installed on the desktop. It works flawlessly, without scripting.

If you mean, to allow scripting on one tab but not others, please clarify. The example given of opening a .pdf on an untrusted site was not a problem for me.
Thanks.

s-m-s wrote:would like to view a .pdf from this site in a seperate tab in my browser

Just open the pdf in a different tab and click on the NoScript placeholder to activate just that file.

More in general, the feature you're asking for cannot be reliably implemented with the current script blocking technology.

Giorgio Maone wrote:

s-m-s wrote:would like to view a .pdf from this site in a seperate tab in my browser

Just open the pdf in a different tab and click on the NoScript placeholder to activate just that file

@ Giorgio: Can you explain why I am able to leave an entire site default-denied, click a .pdf link, it automatically opens a new tab, gives the dialog box "Open/Save", and if "Open", it opens the .pdf immediately, with no additional permissions required, and no placeholder?

Is it the particular link configuration? I can PM you the site in question if you like.

Reproduce on both latest F3 and Fx 8.01.

Tom T. wrote:

Giorgio Maone wrote:

s-m-s wrote:would like to view a .pdf from this site in a seperate tab in my browser

Just open the pdf in a different tab and click on the NoScript placeholder to activate just that file

@ Giorgio: Can you explain why I am able to leave an entire site default-denied, click a .pdf link, it automatically opens a new tab, gives the dialog box "Open/Save", and if "Open", it opens the .pdf immediately, with no additional permissions required, and no placeholder?

Is it the particular link configuration?

Most likely. If in your configuration the type application/x-pdf is associated with an external application (or not associated to anything), rather than a plugin, that's the expected behavior.
Placeholders are for embeddings (frames and plugins), not for data to be saved or opened with an external applications.

Giorgio Maone wrote:

Tom T. wrote: Can you explain why I am able to leave an entire site default-denied, click a .pdf link, it automatically opens a new tab, gives the dialog box "Open/Save", and if "Open", it opens the .pdf immediately, with no additional permissions required, and no placeholder?
Is it the particular link configuration?

Most likely. If in your configuration the type application/x-pdf is associated with an external application (or not associated to anything), rather than a plugin, that's the expected behavior.
Placeholders are for embeddings (frames and plugins), not for data to be saved or opened with an external applications.

Exactly. In Fx 8.01 Options > Applications, I've never entered anything for pdf. Didn't seem to need to, since the Foxit reader is the default desktop reader, it does seem Fx defaulted to that also. Which is why I've questioned the need for FX add-ons or plug-ins for pdfs, since this setup works so well. But that's at another thread, and not pertinent here.

Will double-check on Fx 3.6.24, but unless said otherwise, I'm sure I never associated ,pdf with a Fx tool, so it just picked up the native install. Thanks for clearing that up.

if the destination URL
is a file (e.g. .pdf), I
was missing "allow
file" in the No Script menue.
I use FoxitReader and
yes, I can click on the
background and enable
the file (not scripting) for
viewing in the browser.
But I didn´t find this entry or function in the menue. (file: yes but no: to scripting)

maybe now it´s clearer.

s-m-s wrote:if the destination URL
is a file (e.g. .pdf), I
was missing "allow
file" in the No Script menue.

Becasse it's not necessary, as Giorgio explained. Scripting is not required to open the pdf with your native reader.
Here is an example -- not the one I went to before.
http://www.grc.com/SecurityNow.htm

Click the .pdf link for the latest episode, and note that when you hover the mouse, the destination is:
http://www.grc.com/sn/sn-330.pdf

Which does not require any scripting. You can L-click and get the Open/Save dialog box immediately, or R-click and choose "New Window", "New Tab", "Save", etc. But all happens without script.

I use FoxitReader and
yes, I can click on the
background and enable
the file (not scripting) for
viewing in the browser.
But I didn´t find this entry or function in the menue. (file: yes but no: to scripting)

maybe now it´s clearer.

So long as we're talking about pdfs, there isn't a problem. Do you have a site where this is a problem?

For general scripting, Giorgio told us it can't be done per-tab.

ETA: Confirming that on Fx 3.6.24, Options > Applications, there is no entry for .pdf. So the native reader is used.

ETA2: @ s-m-s: If you're concerned about scripting *inside* the .pdf, which I think might be the issue, then just disable JavaScript support (and all other executable support - Java, Flash, etc.) in the reader. Foxit makes it very easy to do this from the GUI. Edit > Preferences, IIRC, though it may have changed.

Thanks to all for the answers! It´s clear now. Just thought I missed something.

s-m-s wrote:Thanks to all for the answers! It´s clear now. Just thought I missed something.

Thanks for letting us know. Will mark the request for the new feature as "withdrawn".