InformAction Forums

NoScript 11.4.24rc2
Firefox 114.0.2
new profile

STR:

1) go to https://gitlab.torproject.org/tpo/appli ... ad-browser

2) NoScript popup > set torproject.org Custom > select "Enable these capabilities when top domain matches ...torproject.org" > allow some stuff, e.g. "script" and "unrestricted CSS"

3) open NoScript Options & close the gitlab.torproject.org tab

4) NoScript Options > Advanced > Debug, change both instances of "§:torproject.org" to "§:gitlab.torproject.org"

5) uncheck "Debug"

6) visit url from (1) again

7) open NoScript popup, click the "Custom" entry and click the "Enable these capabilities when top domain matches" drop-down

Expected results: "...gitlab.torproject.org" should be a selectable option & showing the set permissions

Actual results:

While the contextual permission appears to be working as expected, the NoScript popup only shows permissions for "Any site" and "...torproject.org" contexts. Nowhere in the NoScript popup is it possible to see or configure the permission that is allowing scripts on gitlab.torproject.org.

In NoScript Options > Per-site Permissions, this permission can be viewed & configured as expected.

Related weirdness when in this situation: clicking the "...torproject.org" entry in the NoScript popup, without making any changes, automatically saves a contextual permission for "...torproject.org" that matches the "ANY SITE" contextual permission?

There is another interesting feature.
In "Per-site Permissions" you can add http://domain.tld/path
For example:
1. For yandex.ru is assigned DEFAULT.
2. Add "https://yandex.ru/pogoda/".
The permissions on https://yandex.ru/pogoda/?lat=xxxxx&lon=yyyyy will work.
But it doesn't work for all sites and paths.

fatboy wrote: ↑Sun Jul 02, 2023 9:47 am There is another interesting feature.
In "Per-site Permissions" you can add http://domain.tld/path

That is intentional and by design. It's possible to configure permissions for an exact path, in order to support allowing individual media items.

What makes you think it's related to this bug report?

Should be fixed in latest development build, thanks.

v 11.4.25rc1
============================================================
x Fixed UI inconsistencies when finer-grained contextual
policies are created/imported by other means (thanks barbaz
for reporting)

11.4.25rc1 is not offered as available update, and trying to get it manually from noscript.net returns 404?

barbaz wrote: ↑Sun Jul 02, 2023 4:32 pm 11.4.25rc1 is not offered as available update, and trying to get it manually from noscript.net returns 404?

Sorry, there was a glitch in the file syncrhonization process. Fixed now, thank you.

Giorgio Maone wrote: ↑Sun Jul 02, 2023 3:19 pm Should be fixed in latest development build, thanks.

v 11.4.25rc1
============================================================
x Fixed UI inconsistencies when finer-grained contextual
policies are created/imported by other means (thanks barbaz
for reporting)

Nice - not only this issue seems fixed, but when clicking the "CUSTOM" it now pre-selects the contextual permission Thanks!!