gggirlgeek wrote:1. Simply disable your plugins until you need them on a site. Then tell Noscript to Allow Scripts globally. ... It will block Embeddings for specifically blacklisted sites if you tick Block every object coming from sites marked as Untrusted.
I could be mistaken, but I thought I had said that -- individually blacklist sites, but that's a lot of sites to blacklist?
The other add-ons, I didn't know about.
gggirlgeek wrote:2. Enable all of your Firefox plugins. Allow scripts globally in Noscript. Make sure Temporarily allow "Base 2nd level Domains" is checked.
Isn't TA Base Domains redundant to allowing all scripts globally?
... Then, under the Embeddings tab again, keep Forbid Java, Flash, Silverlight, and "Other plugins" checked. Also check Apply to Whitelisted sites too. [*]Edit: I'm thinking "global" sites are temporarily Whitelisted, so plugin blocks apply???)
Yes -- actually, they're permanently whitelisted for all practical purposes, unless/until you reverse the choice -- but I thought I said that, too?
Tom T. wrote:NoScript menu > Options > General, and check "Scripts globally allowed (dangerous)" -- and that's not a joke, but ...
You'll still get a placeholder to click on, unless in Options > Embeddings tab, you uncheck (if checked) "Apply these restrictions to whitelisted sites".
IOW, keep "
Apply to whitelisted sites" checked, and you will get a placeholder (NoScript block-logo) giving you a chance to click for permission when desired, and block otherwise. OP wants plug-ins
auto-allowed at "ultra-whitelisted" sites. ("trusted sites") There is no such thing. Once you whitelist the Universe with "Globally Allow", you've trusted them all, so ABE would be needed if this were to be automated.
gggirlgeek wrote:3. Get another extension called Flashblock.
In the past couple of weeks, I've seen two different threads in which Flashblock caused an extension conflict with NoScript. Redundant, and not recommended.
gggirlgeek wrote:Even though I do block javascript with Noscript, I also use Flashblock so that Whitelisted sites can't blast me with video until I'm ready to watch it.
Check "
Apply to whitelisted sites", then they can't do that.
gggirlgeek wrote:I generally do the opposite of the discussion here though. I block all javascript for untrusted sites. I keep my plugins disabled in Firefox
You're using the Firefox Tools > Add-ons > Plugins page, or about:addons, to manually disable plug-ins, then re-enable them when needed?
It seems a lot simpler IMHO to block them in NoScript, and occasionally click a placeholder or two, but everyone's mileage varies...
Otherwise I've found that Noscript doesn't give me a clear indication that it blocked a plugin.
NoScript Options > Embeddings. Check "
Show placeholder icon". Also, the NoScript logo will change color when objects are blocked. See the
NoScript "Features" Page for a complete table of color-coding of the main NS icon.
On NS Options > Appearance tab, (Show...) check "
Blocked Objects".
This should make it very clear when a plug-in is being blocked.
gggirlgeek wrote:Regarding my option #2 above: A simple Forbid Javascipt checkbox under Embeddings would make this really simple.
There's already a checkbox. On NoScript Options > General tab is the "
Scripts Globally Allowed (dangerous!)" checkbox. Once you check it, you just uncheck it to reverse back to the "default-deny" of blocking all JS except for the whitelisted or temp-allowed items.
Also, in Globally Allow mode, the NS Menu offers a choice of "
Forbid Scripts Globally (advised)", which is even faster and easier.
Cheers,
- Tom