noscript icon indicating copy to clipboard operation
noscript copied to clipboard

Frames GUI issue: subdomain/other domain is not suggested in GUI

Open KOLANICH opened this issue 3 years ago • 4 comments

  1. there is a page like
<-- 1.domain.com -->
<noscript><iframe src="https://1.domain.com/frame.html"></iframe></noscript>
  1. NoScript suggests to adjust settings for domain.com. I enable frames:
"§:domain.com": {
	"capabilities": [
		"fetch",
		"noscript",
		"frame"
	],
	"temp": true
}
  1. The frame doesn't work, Blocked by NoScript in Network tab.
  2. I copy the config item, but add 1. in front. Everything starts working.

KOLANICH avatar Dec 19 '22 18:12 KOLANICH

That looks like a bug.

Is NoScript Options > Appearance > [ ] List full addresses in the permissions popup (https://www.noscript.net) checked or not (the latter being the default).

hackademix avatar Dec 19 '22 19:12 hackademix

It was unchecked. I has changed that, and it has solved the issue.

2BH IDK why that "feature" (hiding subdomains) has been introduced in the tool for power users.

KOLANICH avatar Dec 19 '22 20:12 KOLANICH

Thank you.

KOLANICH avatar Dec 19 '22 20:12 KOLANICH

It was unchecked. I has changed that, and it has solved the issue.

I consider it as a bug nonetheless. In the default "show top domains only" you shouldn't be stuck because of a subdomain, it should just work by tweaking permissions on ...domain.com.

2BH IDK why that "feature" (hiding subdomains) has been introduced in the tool for power users.

It's always been the default (also in NoScript "Classic") because it makes day to day operation much easier and faster and reduces users' cognitive load, without significantly lessening security in most cases.

hackademix avatar Dec 19 '22 21:12 hackademix