search

andryou / scriptsafe

a browser extension to bring security and privacy to chrome, firefox, and opera
https://www.andryou.com/scriptsafe
509 stars 79 forks source link

Contents are not shown when all scripts are blocked #352

Open petersohn opened 6 years ago

petersohn commented 6 years ago

I use ScriptSafe with Firefox. My default setting is to allow same-domain scripts, but everything else is opt-in. There are some sites that show the content, then immediately clear it because it detects that ads are disabled. Since the site source has all content, my logical response is to disallow all scripts on that site. However, in this case, nothing is shown.

I tried using another script blocker, and that same site works with it. The last time I encountered this problem is on tvtropes.org, but there are other offending sites too.

petersohn commented 6 years ago

Actually, blocking a site stops it from loading even if otherwise it would be displayed normally with scripts enabled. It feels like blocking a site blocks all contents on that site, not just scripts.

marty60 commented 6 years ago

Not sure if your problem is exactly the same as mine. For me in Firefox many sites are coming up blank, particularly from links clicked on from sites like twitter. Changing the setting in "Behavior Settings/Respect Same-Domain/Loose- allow same domain and subdomains" resolves the issue but defeats the purpose of having the addon in the first place since it whitelists every site you click on from a link. Most of these linked sites don't need scripts to run and do fine with noscript or other browsers.

It looks like the developer is busy and doesn't have a lot of time to devote to his addon, at least for firefox. Too bad since I think scriptsafe is better than the others as far as the layout goes and the simplicity of it. Firefox was ruined with quantum so unfortunately this is probably the best we'll see but if the critical bugs don't get fixed I'll have to move on to something else.

petersohn commented 6 years ago

Normally I am OK with the Respect Same-Domain/Loose setting, because my main reason for using a script blocker is to block 3rd party tracker scripts. Some sites don't even load their content directly, but by JavaScript, which is where it is useful to automatically allow same domain scripts. However, some sites load their content, then run a script that checks if the ads are loaded, and replace a content with a warning that I have to disable my ad blocker. This is where I want ScriptSafe to disable scripts completely, but allow all other content to be displayed. This seems not to be working. I don't know what causes the problem, because I tried blocking same site on other sites which otherwise works both with and without scripts, and everything worked fine. The site source on the problematic sites otherwise show basic HTML code.

Now I switched back to NoScript, which I was using before FF 58, and which became very unstable with its new WebExtensions version. However, while it contains far less features than ScriptSafe, now it's pretty stable, so I'm using that until this bug is fixed.

marty60 commented 6 years ago

Just tried noscript again and it is getting better. If Giorgio would do something with the context menu I'd probably use it. All it does right now is direct you to the toolbar icon unlike the legacy version. That's why I like scriptsafe, because of the context option, it makes it very easy.