noscript icon indicating copy to clipboard operation
noscript copied to clipboard

feature request :: RFC 1918 addressing in whitelist

Open rafamiga opened this issue 4 months ago • 0 comments

I've recently switched from ScriptSafe to NoScript for obvious reasons [v3 manifest]. The extension works great in Chrome, even thou I find text more appealing than icons, the extension does the job perfectly, with few minor exceptions like app.fastmail.com – which is not a huge deal since the site's legit.

Since I'm system architect / sysadmin I use a lot of internal addresses from RFC 1918 range – all those 10.0.0.0/8, 172.16.0.0/12 and 192.168.0.0/16 IPs which are used often in sysadm and devops environments. Accessing hardware BMC/IPMI interfaces, weird web consoles, poorly set up k8s clusters, etc – they all need JS enabled.

Now I'm not 100% sure if this is already implemented and I cannot find the proper switch or a way to do it but I'd like to whitelist all 192.168., 10. and 172.16-31.* IPs instead of manually adding it across my devices. I didn't find any way to do whitelist the right side of an URL, NoScript seems to allow only *.domain whitelisting, not IP.* nor domain.*. Which is totally understandable for normal use, except for those IT nerds who always need something extra.

And since the 172.16/12 subnet complicates things, it's not as straightforward as the other two private subnets, I think it should be implemented as a switch.

Please let me know if this feature request makes sense.

rafamiga avatar Aug 12 '25 07:08 rafamiga