NoScript update may change whitelisted sites

Discussion in 'other software & services' started by TheWindBringeth, Nov 15, 2014.

  1. TheWindBringeth

    TheWindBringeth Registered Member

    Joined:
    Feb 29, 2012
    Posts:
    2,084
    I noticed that NoScript 2.6.9.4 is available, and one of the changes:
    drew my attention. A quick look revealed that the onVersionChanged routine, currently in noscriptService.js, appears to modify the list of sites for which javascript is enabled. Line 2072 in:

    https://addons.mozilla.org/en-US/fi...2/file-redirect/components/noscriptService.js

    As an experiment I added only one Vimeo site to my whitelist (vimeo.com) prior to updating. After installing the update I had both vimeo.com and vimeocdn.com in my whitelist. There was no feedback during or after the update to indicate that my whitelist had been changed.

    Looks to me like this goes back to 2011 and one of the NoScript 2.1.1.2 release candidates. It is something that I either overlooked or forgot about. Pointing it out in case I'm not the only one.
     
  2. guest

    guest Guest

    Glad I don't do whitelisting then. :D
     
  3. xxJackxx

    xxJackxx Registered Member

    Joined:
    Oct 23, 2008
    Posts:
    4,047
    Location:
    USA
    Then I must assume this is the only site you visit? It's the only one I do that I don't have to whitelist to get it to work. Well, mostly anyway. o_O
     
  4. guest

    guest Guest

    I visit a lot of websites, but I usually don't bother/don't need to allow javascript when browsing those websites. At least the wall of texts are still readable. The only places where I have to constantly allow javascript are YouTube and my webmails. But I still don't whitelist them because it's not that difficult to know what to allow anyway.
     
  5. xxJackxx

    xxJackxx Registered Member

    Joined:
    Oct 23, 2008
    Posts:
    4,047
    Location:
    USA
    I was mostly kidding, but I found NoScript to be mostly unusable for that reason. By the time I get done white-listing all of the sites I visit, I may as well not use it so I don't. If I am going to visit unfamiliar sites, I just make sure I am using Sandboxie, so I really don't miss NoScript.
     
  6. TheWindBringeth

    TheWindBringeth Registered Member

    Joined:
    Feb 29, 2012
    Posts:
    2,084
    It appears that a preference was added, in version 2.6.9.7, to control this behavior:
    The version 2.6.9.9 code is using:

    noscript.allowWhitelistUpdates

    (note the trailing s) which defaults to true. I didn't spot a GUI checkbox for this pref, but you can set it via about:config.
     
  7. allizomeniz

    allizomeniz Registered Member

    Joined:
    Aug 23, 2009
    Posts:
    901
    Thanks for that Wind. I've been noticing my whitelist automatically changing and was getting pretty torqued about it. Good to know there's a way to stop it.
     
Loading...