[ext] NoScript 1.1.4.5 - faster and neater
- Giorgio Maone
- Posts: 3516
- Joined: September 21st, 2004, 12:05 am
- Location: Palermo - Italy
- Contact:
[ext] NoScript 1.1.4.5 - faster and neater
There's a browser safer than Firefox...
...it is Firefox with <a href="http://noscript.net" title="Have a safer Firefox with NoScript"><img alt="NoScript" src="http://www.noscript.net/noscript/logo.png"></a>!
NoScript - a Firefox extension for whitelist driven safe JavaScript/Java/Flash/Plugins execution
CHANGELOG
Please don't keep asking for a blacklist, I'm already working on it.
Making black and white live peacefully together is quite a job from a security standpoint , so be patient as it will take time...
Previous NoScript discussion here
...it is Firefox with <a href="http://noscript.net" title="Have a safer Firefox with NoScript"><img alt="NoScript" src="http://www.noscript.net/noscript/logo.png"></a>!
NoScript - a Firefox extension for whitelist driven safe JavaScript/Java/Flash/Plugins execution
CHANGELOG
Please don't keep asking for a blacklist, I'm already working on it.
Making black and white live peacefully together is quite a job from a security standpoint , so be patient as it will take time...
Previous NoScript discussion here
Last edited by Giorgio Maone on March 1st, 2007, 6:22 pm, edited 1 time in total.
-
- Posts: 10
- Joined: March 8th, 2006, 10:42 am
Firefox 2.0 RC2 crash
Hi,
I just encountered a new bug. Firefox crashes, when you visit this page:
http://www.hashbang.de/popup.html
if all of the following criteria are met:
* Firefox 2.0 RC2
* Popups are enabled for that site
* NoScrip is installed and JavaScript is enabled for that site
The page mentioned above is just a test page I've created to demonstrate the bug. Note: it is important that the third parameter is given to window.open(), otherwise the crash does not occur. The crash also does not occur if Firefox is run with NoScript disabled or if NoScript is enabled, but JavaScript is disabled.
I just encountered a new bug. Firefox crashes, when you visit this page:
http://www.hashbang.de/popup.html
if all of the following criteria are met:
* Firefox 2.0 RC2
* Popups are enabled for that site
* NoScrip is installed and JavaScript is enabled for that site
The page mentioned above is just a test page I've created to demonstrate the bug. Note: it is important that the third parameter is given to window.open(), otherwise the crash does not occur. The crash also does not occur if Firefox is run with NoScript disabled or if NoScript is enabled, but JavaScript is disabled.
- GrailKnight
- Posts: 2359
- Joined: January 5th, 2004, 5:40 am
- Location: Pennsylvania, USA
- Lanik
- Posts: 606
- Joined: August 18th, 2003, 9:34 pm
- Location: SF Bay Area, USA
Re: Firefox 2.0 RC2 crash
WFM no problems after following your directions and it even kicks back a popup as well. The popup is blocked unless I allow it.hashbang wrote:Hi,
I just encountered a new bug. Firefox crashes, when you visit this page:
http://www.hashbang.de/popup.html
if all of the following criteria are met:
* Firefox 2.0 RC2
* Popups are enabled for that site
* NoScrip is installed and JavaScript is enabled for that site
The page mentioned above is just a test page I've created to demonstrate the bug. Note: it is important that the third parameter is given to window.open(), otherwise the crash does not occur. The crash also does not occur if Firefox is run with NoScript disabled or if NoScript is enabled, but JavaScript is disabled.
- quirky9
- Posts: 15
- Joined: March 23rd, 2003, 4:06 am
Hi..
after updating to 1.1.4.5 www.motogp.com does not load at all
and www.theisonews.com look weird with the extension enabled
I use firefox 1.5.0.7 with xpsp2 and /javascript-enable /java-disable
thnx
after updating to 1.1.4.5 www.motogp.com does not load at all
and www.theisonews.com look weird with the extension enabled
I use firefox 1.5.0.7 with xpsp2 and /javascript-enable /java-disable
thnx
- Giorgio Maone
- Posts: 3516
- Joined: September 21st, 2004, 12:05 am
- Location: Palermo - Italy
- Contact:
quirky9 wrote:after updating to 1.1.4.5 www.motogp.com does not load at all
Not surprising, as the home page contains one script tag and nothing else.
Just click on the NoScript icon and "Allow motogp.com", and everything will be fine.
quirky9 wrote:and www.theisonews.com look weird with the extension enabled
Same as above, just allow theisonews.com...
@hashbang:
I cannot reproduce your crash, an neither Lanik apparently.
You probably need to search for another extension to blame
-
- Posts: 2
- Joined: October 18th, 2006, 4:04 am
File:// UNC path blocking
Hi,
I'm a bit confused by the way NoScript handles the file:// paths. When I'm using FireFox on my home Linux machine viewing web pages that are on the local hard drive during development, NoScript gives me the options to "Allow file://" and "Temporarily allow file://". At work, we have some Pathworks servers which we have to access with the same syntax, and again NoScript turns red and I have the two same choices as above.
The question I have is how exactly is this supposed to function? Everything behaves the same no matter if I tell Noscript to allow file:// or not. I can see no change at all.
Should I be unable to use the file:// syntax when NoScript is blocking it?
Thanks much.. wonderful extension!!
Bob
I'm a bit confused by the way NoScript handles the file:// paths. When I'm using FireFox on my home Linux machine viewing web pages that are on the local hard drive during development, NoScript gives me the options to "Allow file://" and "Temporarily allow file://". At work, we have some Pathworks servers which we have to access with the same syntax, and again NoScript turns red and I have the two same choices as above.
The question I have is how exactly is this supposed to function? Everything behaves the same no matter if I tell Noscript to allow file:// or not. I can see no change at all.
Should I be unable to use the file:// syntax when NoScript is blocking it?
Thanks much.. wonderful extension!!
Bob
-
- Posts: 1
- Joined: August 18th, 2005, 5:29 pm
Advanced Option
In the advanced options a check box near the bottem labeled "Forbid <a ping...> is checked by default.
What does this option acctually do, in layman's terms? Allow pinging of remote hosts if requested?
Thanks! :s
What does this option acctually do, in layman's terms? Allow pinging of remote hosts if requested?
Thanks! :s
- Giorgio Maone
- Posts: 3516
- Joined: September 21st, 2004, 12:05 am
- Location: Palermo - Italy
- Contact:
Re: File:// UNC path blocking
RTrev wrote:Should I be unable to use the file:// syntax when NoScript is blocking it?
Not at all, only JavaScript coming from file:// origins shouldn't run, but you can open pages as always.
Ed|Rush wrote:In the advanced options a check box near the bottem labeled "Forbid >a ping...< is checked by default.
It's a privacy measure: it prevents links from sending extra information to a server different than the explicit destination when they're clicked.
References:
http://weblogs.mozillazine.org/darin/ar ... 09594.html
http://whatwg.org/specs/web-apps/current-work/#ping
- therube
- Posts: 21714
- Joined: March 10th, 2004, 9:59 pm
- Location: Maryland USA
NoScript 1.1.4.5
SeaMonkey 1.1b
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1b2) Gecko/20060913
Error -239 on attempted install.
Had to exit SeaMonkey.
Manually delete noscript.jar from Profile /chrome/ directory.
Start SeaMonkey.
Then successfully installed NoScript.
(PS: In case you missed it, see my FlashGot bug report).
(PPS: Maybe you'll want to lend some of your insight to this post & associated bug, Illegal operation in Windows Media Player plugin).
SeaMonkey 1.1b
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1b2) Gecko/20060913
Error -239 on attempted install.
Had to exit SeaMonkey.
Manually delete noscript.jar from Profile /chrome/ directory.
Start SeaMonkey.
Then successfully installed NoScript.
(PS: In case you missed it, see my FlashGot bug report).
(PPS: Maybe you'll want to lend some of your insight to this post & associated bug, Illegal operation in Windows Media Player plugin).
Fire 750, bring back 250.
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball CopyURL+ FetchTextURL FlashGot NoScript
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball CopyURL+ FetchTextURL FlashGot NoScript
- Giorgio Maone
- Posts: 3516
- Joined: September 21st, 2004, 12:05 am
- Location: Palermo - Italy
- Contact:
@therube:
Thanks. I've not much to add to the WMP bug, it really needs to be (re)fixed by the plugin guys as it's not NoScript specific.
I'll look into the Rapidshare issue too.
@yaoming:
Thank you very much for the info.
Are you using any tab-related extension together with NoScript? could you send me your complete extensions list?
@scottme:
If there was no port specification, it was easy as allowing knownhost.company.com.
But Mozilla CAPS (and therefore NoScript) treat different ports as different sites (correctly) and don't allow globbing (correct performance sake but annoying).
In the future NoScript plans there's a "globbing wrapper" around CAPS which may work-around this limitation, but ATM you're out of luck
Thanks. I've not much to add to the WMP bug, it really needs to be (re)fixed by the plugin guys as it's not NoScript specific.
I'll look into the Rapidshare issue too.
@yaoming:
Thank you very much for the info.
Are you using any tab-related extension together with NoScript? could you send me your complete extensions list?
@scottme:
If there was no port specification, it was easy as allowing knownhost.company.com.
But Mozilla CAPS (and therefore NoScript) treat different ports as different sites (correctly) and don't allow globbing (correct performance sake but annoying).
In the future NoScript plans there's a "globbing wrapper" around CAPS which may work-around this limitation, but ATM you're out of luck
-
- Posts: 9
- Joined: December 25th, 2004, 11:01 pm
-
- Posts: 1
- Joined: October 21st, 2006, 12:52 pm
NoScript-MusicMatch-Pogo problems
Hello,
I just recently installed NoScript. I have FireFox 1.5.0.7. I've allowed some scripts from the MusicMatch and Pogo websites. However, when I play Pogo games, MusicMatch slows down like a bad turntable. Solutions??
Thanks.
datadame
I just recently installed NoScript. I have FireFox 1.5.0.7. I've allowed some scripts from the MusicMatch and Pogo websites. However, when I play Pogo games, MusicMatch slows down like a bad turntable. Solutions??
Thanks.
datadame
- Vinil_
- Posts: 1
- Joined: October 21st, 2006, 2:14 pm
- Location: Lisboa - Portugal
hy
I use firefox 1,5 and installed noscript for the 1.1.4.1 version and disappeared.
I try to remove and to install new versions and nothing.
wait that they help in this problem.
to be able to see the problem I leave an image here
tks
I use firefox 1,5 and installed noscript for the 1.1.4.1 version and disappeared.
I try to remove and to install new versions and nothing.
wait that they help in this problem.
to be able to see the problem I leave an image here
tks