hackademix / noscript

The popular NoScript Security Suite browser extension.
https://noscript.net/
GNU General Public License v3.0
844 stars 90 forks source link

Add confirmation step for "Disable restrictions globally (dangerous)" #351

Open ChasBelov opened 4 months ago

ChasBelov commented 4 months ago

I accidentally enabled "Disable restrictions globally (dangerous)" and didn't realize it (even with the warning message that now appears if I click the NoScript status icon) that I had goofed. It took me seeing the warning message a couple times before I realized what had happened and clicked the corrective link. (It doesn't help that the corrective link is in red text, something which I have trouble grokking.)

And that said, if I did accidentally activate it, presumably a website could do damage even before I had a chance to respond to the new warning.

It would be better, if someone clicks "Disable restrictions globally (dangerous)" to provide a confirmation dialog before actually putting it into effect. Possible wording might be:

"You have requested disabling all JavaScript restrictions on all websites. This is dangerous. Are you sure you want to do this?"

With two buttons having two words each: Cancel (safe) Continue (dangerous)