InformAction Forums

Hi, due to the new bug found in java, i thought of using NoScript to block Java but only on non trusted sites and add trusted websites with Java applets (for onlinebanking etc) to the whitelist.

Is there a possibility to do so? Because when i only check the Block Java checkbox, Javascript is also blocked ( which is needed to correctly display some non-trusted sites)

Thanks for your help
NightFox

Java 0-day exploit question

when i only check the Block Java checkbox, Javascript is also blocked

One should have nothing to do with the other.

JavaScript is not Java

In regards to this 0-day exploit, I would like to be able to block all Java (which I know NoScript can do), but allow all Javascript. Effectively I want NoScript to block just plugins, but allow Javascript. Is this possible?

Thanks!

If you want to flat out block Java, why not just disable it in Addons Manager?

Note that there may be other avenues for Java to run, outside of the Profile(s) you disabled it in, via IE or otherwise, so if you really wanted to nuke it, best way is to uninstall it. Otherwise, neuter it through Control Panel & also block its CLSID (I have heard).

The reason I don't just disable the Java plugin in the add-ons manager is that there are some LAN services that require Java. Thus, I would like to require all java be explicitly click-to-run, but without disabling Javascript as well

would like to require all java be explicitly click-to-run, but without disabling Javascript as well

One should have nothing to do with the other.

You can make Java (& any other selected plugins/*) always click to play by setting; Embeddings | Apply these restrictions to whitelisted sites too.

therube wrote:

would like to require all java be explicitly click-to-run, but without disabling Javascript as well

One should have nothing to do with the other.

You can make Java (& any other selected plugins/*) always click to play by setting; Embeddings | Apply these restrictions to whitelisted sites too.

Right, but then how can I always allow/permit Javascript (without having to click on it or whitelist the domain)?

General | Scripts Globally Allowed (dangerous), if that's what you wanted.