[ext] NoScript 1.1.4.5 - faster and neater

Announce and Discuss the Latest Theme and Extension Releases.
Locked
User avatar
Giorgio Maone
Posts: 3516
Joined: September 21st, 2004, 12:05 am
Location: Palermo - Italy
Contact:

[ext] NoScript 1.1.4.5 - faster and neater

Post by Giorgio Maone »

There's a browser safer than Firefox...
...it is Firefox with <a href="http://noscript.net" title="Have a safer Firefox with NoScript"><img alt="NoScript" src="http://www.noscript.net/noscript/logo.png"></a>!




NoScript - a Firefox extension for whitelist driven safe JavaScript/Java/Flash/Plugins execution

CHANGELOG

Please don't keep asking for a blacklist, I'm already working on it.
Making black and white live peacefully together is quite a job from a security standpoint ;), so be patient as it will take time...

Previous NoScript discussion here
Last edited by Giorgio Maone on March 1st, 2007, 6:22 pm, edited 1 time in total.
hashbang
Posts: 10
Joined: March 8th, 2006, 10:42 am

Firefox 2.0 RC2 crash

Post by hashbang »

Hi,

I just encountered a new bug. Firefox crashes, when you visit this page:

http://www.hashbang.de/popup.html

if all of the following criteria are met:

* Firefox 2.0 RC2
* Popups are enabled for that site
* NoScrip is installed and JavaScript is enabled for that site

The page mentioned above is just a test page I've created to demonstrate the bug. Note: it is important that the third parameter is given to window.open(), otherwise the crash does not occur. The crash also does not occur if Firefox is run with NoScript disabled or if NoScript is enabled, but JavaScript is disabled.
User avatar
GrailKnight
Posts: 2359
Joined: January 5th, 2004, 5:40 am
Location: Pennsylvania, USA

Post by GrailKnight »

Thanks Giorgio
"There is nothing more deceptive than an obvious fact". - Sherlock Holmes
User avatar
Lanik
Posts: 606
Joined: August 18th, 2003, 9:34 pm
Location: SF Bay Area, USA

Re: Firefox 2.0 RC2 crash

Post by Lanik »

hashbang wrote:Hi,

I just encountered a new bug. Firefox crashes, when you visit this page:

http://www.hashbang.de/popup.html

if all of the following criteria are met:

* Firefox 2.0 RC2
* Popups are enabled for that site
* NoScrip is installed and JavaScript is enabled for that site

The page mentioned above is just a test page I've created to demonstrate the bug. Note: it is important that the third parameter is given to window.open(), otherwise the crash does not occur. The crash also does not occur if Firefox is run with NoScript disabled or if NoScript is enabled, but JavaScript is disabled.
WFM no problems after following your directions and it even kicks back a popup as well. The popup is blocked unless I allow it.
User avatar
quirky9
Posts: 15
Joined: March 23rd, 2003, 4:06 am

Post by quirky9 »

Hi..

after updating to 1.1.4.5 www.motogp.com does not load at all
and www.theisonews.com look weird with the extension enabled

I use firefox 1.5.0.7 with xpsp2 and /javascript-enable /java-disable

thnx
User avatar
Giorgio Maone
Posts: 3516
Joined: September 21st, 2004, 12:05 am
Location: Palermo - Italy
Contact:

Post by Giorgio Maone »

quirky9 wrote:after updating to 1.1.4.5 www.motogp.com does not load at all

Not surprising, as the home page contains one script tag and nothing else.
Just click on the NoScript icon and "Allow motogp.com", and everything will be fine.

quirky9 wrote:and www.theisonews.com look weird with the extension enabled

Same as above, just allow theisonews.com...

@hashbang:
I cannot reproduce your crash, an neither Lanik apparently.
You probably need to search for another extension to blame ;)
RTrev
Posts: 2
Joined: October 18th, 2006, 4:04 am

File:// UNC path blocking

Post by RTrev »

Hi,

I'm a bit confused by the way NoScript handles the file:// paths. When I'm using FireFox on my home Linux machine viewing web pages that are on the local hard drive during development, NoScript gives me the options to "Allow file://" and "Temporarily allow file://". At work, we have some Pathworks servers which we have to access with the same syntax, and again NoScript turns red and I have the two same choices as above.

The question I have is how exactly is this supposed to function? Everything behaves the same no matter if I tell Noscript to allow file:// or not. I can see no change at all.

Should I be unable to use the file:// syntax when NoScript is blocking it?

Thanks much.. wonderful extension!!

Bob
Ed|Rush
Posts: 1
Joined: August 18th, 2005, 5:29 pm

Advanced Option

Post by Ed|Rush »

In the advanced options a check box near the bottem labeled "Forbid <a ping...> is checked by default.

What does this option acctually do, in layman's terms? Allow pinging of remote hosts if requested?

Thanks! :s
hashbang
Posts: 10
Joined: March 8th, 2006, 10:42 am

Post by hashbang »

Ok, I'll do some more thorough testing tomorrow to see if some other aspects are involved.
User avatar
Giorgio Maone
Posts: 3516
Joined: September 21st, 2004, 12:05 am
Location: Palermo - Italy
Contact:

Re: File:// UNC path blocking

Post by Giorgio Maone »

RTrev wrote:Should I be unable to use the file:// syntax when NoScript is blocking it?

Not at all, only JavaScript coming from file:// origins shouldn't run, but you can open pages as always.

Ed|Rush wrote:In the advanced options a check box near the bottem labeled "Forbid &gt;a ping...&lt; is checked by default.

It's a privacy measure: it prevents links from sending extra information to a server different than the explicit destination when they're clicked.
References:
http://weblogs.mozillazine.org/darin/ar ... 09594.html
http://whatwg.org/specs/web-apps/current-work/#ping
User avatar
therube
Posts: 21685
Joined: March 10th, 2004, 9:59 pm
Location: Maryland USA

Post by therube »

NoScript 1.1.4.5

SeaMonkey 1.1b
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1b2) Gecko/20060913

Error -239 on attempted install.

Had to exit SeaMonkey.
Manually delete noscript.jar from Profile /chrome/ directory.
Start SeaMonkey.
Then successfully installed NoScript.

(PS: In case you missed it, see my FlashGot bug report).
(PPS: Maybe you'll want to lend some of your insight to this post & associated bug, Illegal operation in Windows Media Player plugin).
Fire 750, bring back 250.
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball CopyURL+ FetchTextURL FlashGot NoScript
User avatar
Giorgio Maone
Posts: 3516
Joined: September 21st, 2004, 12:05 am
Location: Palermo - Italy
Contact:

Post by Giorgio Maone »

@therube:
Thanks. I've not much to add to the WMP bug, it really needs to be (re)fixed by the plugin guys as it's not NoScript specific.
I'll look into the Rapidshare issue too.

@yaoming:
Thank you very much for the info.
Are you using any tab-related extension together with NoScript? could you send me your complete extensions list?

@scottme:
If there was no port specification, it was easy as allowing knownhost.company.com.
But Mozilla CAPS (and therefore NoScript) treat different ports as different sites (correctly) and don't allow globbing (correct performance sake but annoying).
In the future NoScript plans there's a "globbing wrapper" around CAPS which may work-around this limitation, but ATM you're out of luck :(
yaoming
Posts: 9
Joined: December 25th, 2004, 11:01 pm

Post by yaoming »

tab related extension? i'm using tabmixplus, giorgio. but TMP is working okay with the previous noscript 1.1.4.3

here's my firefox extension list:

adblock
flashgot
imglikeopera
enhanced history manager
imageshack right click
bugmenot
allow right click
tabmixplus
customizegoogle
noscript
datadame
Posts: 1
Joined: October 21st, 2006, 12:52 pm

NoScript-MusicMatch-Pogo problems

Post by datadame »

Hello,

I just recently installed NoScript. I have FireFox 1.5.0.7. I've allowed some scripts from the MusicMatch and Pogo websites. However, when I play Pogo games, MusicMatch slows down like a bad turntable. Solutions??

Thanks.

datadame
User avatar
Vinil_
Posts: 1
Joined: October 21st, 2006, 2:14 pm
Location: Lisboa - Portugal

Post by Vinil_ »

hy
I use firefox 1,5 and installed noscript for the 1.1.4.1 version and disappeared.
I try to remove and to install new versions and nothing.
wait that they help in this problem.
to be able to see the problem I leave an image here

tks
Locked