Comments (5)
I have tested older releases to see when the bug was introduced. The last release where "Disable restrictions for this tab" worked as expected was NoScript 10.1.9.8 (Oct 6, 2018) and the first one with the bug was NoScript 10.1.9.9rc1 (Oct 13, 2018). I think this should help you find the bug.
from noscript.
The problem is with the cookie-based hack to communicate per-tab information, which cannot work with non-HTTP subframes (such the about:blank ones in your test page). The dev tools and other extension seem to lock the frame loading so that the inherited cookie is read before it gets erased by the parent page, but this doesn't happen (nor is actually desirable) in normal conditions.
Also, the "old" name-based hack is not affected by this problem, but had serious issues of its own.
I'm afraid I must resort to yet some other sort of hack, possibly for subframes only...
from noscript.
Thanks for looking into the problem and your interesting analysis!
I thought about using NoScript as my only extension again and the behavior confused me quite a bit. This function is very convenient for me in certain situations, but at the end of the day the most important thing for me is to be sure that unwanted scripts are not executed.
Feel free to let me know, if I can test anything.
from noscript.
Please check https://github.com/hackademix/noscript/releases/tag/10.2.2rc1, thanks.
from noscript.
Works like a charm for the test page and I have not seen any negative surprises so far. Thanks for the fix!
from noscript.
Related Issues (20)
- NoScript causes RSSpreview extension to fail since upgrading to Firefox 126 HOT 7
- [New Feature]: (hopefully quite easy to implement) Adding a quick way to simulate NoScript default set/change of an automatically identified web server or 'domain' trust script level
- [New feature]: (hopefully easy to implement too) Could you please add dark/light theme switch also to https://noscript.net/about... pages reached/generated as result of user submitted queries started from NoScript side (i.e. while seeing trusted list inside Options)
- Manifest V2 updates in Chrome Web Store HOT 5
- Image load inconsistent for NY Times article pages on Firefox HOT 2
- Publishing CRX file for chromium-based browsers
- noscript shft+alt+n keystroke opens edit menu instead HOT 1
- NoScript blocks displaying images at https://www.haisenryakuzu.net/
- [Bug] Occasional crash when calling NoScript (Android/Firefox)
- CSP media-src issue
- [Bug] OpenSpeedTest doesn't work, even with restrictions disabled HOT 3
- Some blocked capability reports from subframes are not propagated to the main frame and therefore are missing from the UI HOT 1
- Whitelist localhost ports? HOT 1
- Prevent duplicate synthetic placeholders for invisible capability probes HOT 4
- SVG generates `Couldn’t process unknown directive ‘noscript-marker’` warnings HOT 1
- Webgl capability not highlighted when the page requests it
- SyncMessage (early sync XHR) breaks XML gzip-encoded documents HOT 8
- NS on Firefox triggers "InternalError: too much recursion" and infinite "save" dialogs on Economist.com article even when restrictions disabled
- 2477april2024.com refused to block
- Please add option to disable automatic page reloading
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from noscript.