hackademix/noscript

[Feature Request] Trust/Allow script(s) to run on a single site/domain only, instead of globally

Opened this issue · 3 comments

happeeshopper commented

Reason: Certain scripts can be used to serve either benign or malicious code, depending on the domain owners intentions.

I find myself stuck in the position where I don't want to trust certain scripts globally, because they could potentially be used to serve malicious code, but then always having to 'temporarily allow' said scripts on trusted websites that I frequent.

Being able to 'trust' a script to always run on a certain website only, instead of globally on all websites would be useful.

hackademix commented

How does this differ (if it does) from Contextual Policies?

  • 👍1
happeeshopper commented

It doesn't, that's exactly what I was asking for, I just hadn't noticed it 👍

happeeshopper commented

How does this differ (if it does) from Contextual Policies?

I noticed there's a problem with contextual policies - it can only be set for a single domain, so if a common script such as ajax.googleapis.com is custom set to be 'allowed' on a single domain and then I 'temporarily allow' it on another domain - the contextual policy is reset and it's no longer automatically allowed on the original set domain.