Question about noscript

pete6032

Diamond Member
Dec 3, 2010
7,713
3,273
136
So I usually surf with just firefox + adblockplus. I just downloaded noscript and the number of scripts being run on some pages is absolutely crazy. I see pages with 15+ scripts on them. These are things like cbssports.com or my local newspaper website.

My question is - prior to me downloading noscript, were all of these scripts allowed to run on my browser?

I'm having trouble distinguishing between what I should allow to run and what I should block. Is it ever ok to just say "accept all scripts on this webpage?"
 

lxskllr

No Lifer
Nov 30, 2004
58,047
8,273
126
Yes, all those scripts were running. I accept the minimum necessary to allow the site to work, and have very few on permanent whitelist. It makes browsing more work, but it adds security, and page load speed.

For easier browsing, blacklist known trackers/nuisances. You can then whitelist stuff you're comfortable with. Take your time. It doesn't have to be done in one session. You can slowly build privacy and security as the mood strikes.
 

MongGrel

Lifer
Dec 3, 2013
38,466
3,067
121
Yes, all those scripts were running. I accept the minimum necessary to allow the site to work, and have very few on permanent whitelist. It makes browsing more work, but it adds security, and page load speed.

For easier browsing, blacklist known trackers/nuisances. You can then whitelist stuff you're comfortable with. Take your time. It doesn't have to be done in one session. You can slowly build privacy and security as the mood strikes.

All of the above, I usually hit temporarily allow so I can just revoke easily if I desire.

And I use Ghostery with NoScript, personally.

The wife had complaints about it herself and removed it on hers, she can deal with it, I think is is worth it and have it on the other two computers in the house.
 
Last edited:

lxskllr

No Lifer
Nov 30, 2004
58,047
8,273
126
The wife had complaints about it herself and removed it on hers, she can deal with it, I think is is worth it and have it on the other two computers in the house.

You could allow scripts globally on her machine, and it'll still offer some protection. I do that on my boss's, and my mother's machines.

Allow Scripts Globally (dangerous) switches NoScript in the (not recommended) "Default Allow" mode. Only sites and objects explicitly marked as untrusted will be disabled. Other important security features, like Anti-XSS protection, HTTPS enforcement, Clickjacking protection and ABE will still be effective, though.

https://noscript.net/features
 

pete6032

Diamond Member
Dec 3, 2010
7,713
3,273
136
The problem I'm having is that I'm generally surfing a bunch of web pages that I don't need noscript for. These are sites like government pages or school email or my bank, etc. Every time I go to a new site I have to reload it 2-3 times to get it to work. Is there any way to speed up this approval process?

For example on this website - http://profootballtalk.nbcsports.com/ - there are 18 scripts alone. Some of them its pretty clear they are ads, and some of them its pretty clear they are necessary for the site to function, but others I don't know about - typekit.net, kxrd.net, gravatar.com, theplatform.com. How do I know whether to enable these?
 

lxskllr

No Lifer
Nov 30, 2004
58,047
8,273
126
You can do /something/(middle click, right click on the script?) to get a WOT page to see what others think of the script. You can also manually search the names. I block everything by default, and then temporarily enable one by one until the page works. You can then make permissions permanent once you get it settled(I don't).

This isn't a set/forget addon. You have to put some time in, but the results are worth it imo. As I said, you don't have to do everything at once. Temporarily enable all, and deal with it later. Worst case, is you'll be as bad off as not using NoScript at all, so any progress over time, even if slow will be better than you were yesterday.

Edit:
Also, by blacklisting known trash, it shortens the script list you have to research. The work gets easier as the blacklist grows. If I hit a page with tons of scripts, I sometimes just do without. There's little I *need* online, and don't like wasting time playing games with some of these sites.
 
Last edited:

John Connor

Lifer
Nov 30, 2012
22,757
617
121
What I do is in the options allow base 2nd level domains by default. This lessens the cumbersomeness. But if you find a site that isn't working you will have to allow certain scrips.