noscript

noscript copied to clipboard

During regular browsing I often have to fiddle with the minimal NoScript settings for a site to function correctly. The reasons for why I set it this exact way are...

nikoladev

XSS Protection: False positive if websites wants to create a google calendar date with special characters like ẞ ß Ä Ö Ü ö ä ü

5

The access to `https://calendar.google.com/calendar/u/0/r/eventedit?parametersForDate` is blocked if XSS protection is active and I get no question if I want to allow it. Only workaround is a global deactivation of the...

MartinX3

Feature Request: Allow different NoScript permissions per container

1

I'd like for NoScript to integrate with the new Firefox containers (contextual identities) by allowing users to associate script permissions either with containers or make them global. This would enable...

Qsario

noscript + firefox containers

9

Is there a way to block a domain in all tabs except one specific container [Firefox container](https://addons.mozilla.org/en-US/firefox/addon/multi-account-containers/)? That way, I could have a Youtube container with google scripts activated, and...

mfr-itr

Add support for additional CSP directives

1

Would be great if we can add additional restrictions. Like blocking images from certain domains using the img-src directive from CSP. Or blocking css code using style-src. Thanks in advance.

keganlance

The toolbar function "Disable restrictions globally (dangerous)" may be too dangerous: A change to "Temporarily disable restrictions globally (dangerous)" should be an improvement.

2

The toolbar function "Disable restrictions globally (dangerous)" largely deactivates NoScript. The problem that people accidentally activate it keeps appearing in the forum. I think a change to "Temporarily disable restrictions...

musonius

WhiteListed sites are forgotten on Firefox and latest MSEdge

6

Actual Issue: NoScript doesn't remember any sites added after restart. This started happening about a week ago in Latest MSEdge and now it's spread to my firefox profiles on both...

eltonfreak

Disable DoS protection of XSS sanitizer

2

I usually open a bunch of pages at once. Sometimes this slows Firefox down to the point that NoScipt’s XSS protection kicks in after 20 seconds, and displays a warning...

jtotht

Enabling Domain A's scripts, but only when requested by a page in Domain B

4

I'm looking for the possibility to allow/trust scripts served by a CDN (such as ajax.googleapis.com), but *only* when the page that embeds/links those scripts is in a specific trusted domain....

jimbobmcgee

Normal:  With a long URL: https://llanfairpwllgwyngyllgogerychwyrndrobwllllantysiliogogogoch.co.uk/  Version: 11.1.5

B0pol