I noticed that NoScript 2.6.9.4 is available, and one of the changes: drew my attention. A quick look revealed that the onVersionChanged routine, currently in noscriptService.js, appears to modify the list of sites for which javascript is enabled. Line 2072 in: https://addons.mozilla.org/en-US/fi...2/file-redirect/components/noscriptService.js As an experiment I added only one Vimeo site to my whitelist (vimeo.com) prior to updating. After installing the update I had both vimeo.com and vimeocdn.com in my whitelist. There was no feedback during or after the update to indicate that my whitelist had been changed. Looks to me like this goes back to 2011 and one of the NoScript 2.1.1.2 release candidates. It is something that I either overlooked or forgot about. Pointing it out in case I'm not the only one.
Then I must assume this is the only site you visit? It's the only one I do that I don't have to whitelist to get it to work. Well, mostly anyway.
I visit a lot of websites, but I usually don't bother/don't need to allow javascript when browsing those websites. At least the wall of texts are still readable. The only places where I have to constantly allow javascript are YouTube and my webmails. But I still don't whitelist them because it's not that difficult to know what to allow anyway.
I was mostly kidding, but I found NoScript to be mostly unusable for that reason. By the time I get done white-listing all of the sites I visit, I may as well not use it so I don't. If I am going to visit unfamiliar sites, I just make sure I am using Sandboxie, so I really don't miss NoScript.
It appears that a preference was added, in version 2.6.9.7, to control this behavior: The version 2.6.9.9 code is using: noscript.allowWhitelistUpdates (note the trailing s) which defaults to true. I didn't spot a GUI checkbox for this pref, but you can set it via about:config.
Thanks for that Wind. I've been noticing my whitelist automatically changing and was getting pretty torqued about it. Good to know there's a way to stop it.
