InformAction Forums

This may have been asked, but if so I didn't find it in search. What I would like to know is if there is a way to temporarly allow a site for only the current window. For instance I have several pages that I only allow to run googleapi.com(just an easy example) when I specifically working with them. Any other time I don't allow the access to the domain since it should only need that access when I'm working with it.

The problem that has always worried me is when I temp allow it the allow is for any window. So if I open a new window and if I end up at on a page I trust even less or not at all it still has access to googleapi.com because I temp allowed access. Is there any way for the temp allow only work on a per window basis? The answer seems to be "No", but I thought I would ask.

If you only wanted an allow to not affect existing windows (though it would affect new or, a revisit of an existing, windows) then, 5.2 Q: When I change permissions, all the affected tabs/windows are reloaded, and sometimes this is annoying. I know I could turn off automatic reloading from NoScript Options|General, but can I disable it for background tabs/windows but keep it for the current tab only?

Otherwise you could use ABE to limit scope. 8.10 Q: Can I use ABE to fine-tune NoScript's permissions?

This or similar features have actually been requested several times, eg http://forums.informaction.com/viewtopic.php?f=7&t=8986. You're right, though, the search functionality doesn't seem to work well.

The thing is, this is really an adblocking/privacy issue, not a security issue, therefore it's more appropriate for Adblock Plus than NoScript. If googleapis.com is likely to serve malware, then you should never allow it at all; if it's safe, then from a security perspective, you may as well allow it everywhere. If you want to allow it when needed, but prevent it from tracking you the rest of the time, then what you really want is an adblocker. From NoScript's perspective, since you're willing to let it run when needed, googleapis is a trusted site.

And btw, ABP does have similar features to what you're requesting.

Thank you both. Googleapi.com should be fine all of the time, but if everything was always how it should be then we wouldn't need things like NoScript in the first place. I just like the added piece of mind. I have addblock plus as well so I see if there is something I can do with that then. Thanks for the suggestion.