Replies

Oh wow, that never happens by default. EVERYTHING should be blocked and untrusted by default. So it looks like Google got to NoScript too. Set those each to default/untrusted. The only one needed to play the videos is the top “youtube.com” as trusted. The rest can be set to default. But now keep in mind most sites are going to require that top one in the list, which is usually the JavaScript, To be on or it will give you a “Java required” notice. Or the site will not render.

So go to the red icon with the wrench “Options”. Then “per site permissions”. Go though and switch them to default/untrusted except these as trusted:

…afx.ms
ajax.aspnetcdn.com
…bootstrapcdn.com
tinymce.cachefly.net
…mozilla.net
addons.mozilla.org
…noscript.net

Now here is the problem though. To see the videos on Youtube and turning on that top listing you are allowing the JS to deliver that bad package. But at least it is blocking all the rest. So this is again why your cache will still need to be cleared before logging in anywhere else.

I’m telling you, they got us with that top JS package requirement to use sites. That is where they load the bad stuff. And almost all sites will require that top JS listing to be turned on to see it. But it is better than also being connected to the other sometimes 30 3rd party APIs too. I have gotten used to just using broken sites as best I can because NoScript is breaking it by blocking elements. As long as just the text is there to read that is enough for me. But usually turning on just that top listing will render a website as it should be except embedded videos. I’m good with that to be much much safer without all those other 3rd party connections.

It is going to be a learning curve. But it is the only way to be halfass safe. They are ruining our internet experience with this garbage. They are making sure their sites are broken unless you allow their crap. This is why I only go to about four sites and know the minimal NoScript settings for those particular sites. I’m going to PM you...