Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Probably the HTTPS enforcement: https://noscript.net/faq#qa6_3


Thanks. Wow, can NoScript be unpredictable.

1) Forbid active web content unless it comes from a secure (HTTPS) connection would, I assume, block the active elements, not redirect the entire page to HTTPS.

2) I had it set as:

Forbid active web content unless it comes from a secure (HTTPS) connection = Never

You'd think that would disable it, but according the question just above the one you linked, Never apparently means Always unless the site is whitelisted:

----

Open NoScript Options|Advanced|HTTPS|Behavior, click under Forbid active web content unless it comes from a secure (HTTPS) connection and choose one among:

1. Never - every site matching your whitelist gets allowed to run active content.

2. When using a proxy (recommended with Tor) - only whitelisted sites which are being served through HTTPS are allowed when coming through a proxy. This way, even if an evil node in your proxy chain manages to spoof a site in your whitelist, it won't be allowed to run active content anyway.

3. Always - no page loaded by a plain HTTP or FTP connection is allowed.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: