|
been surfing with it for quite a while now, its indispensible. Its not that much pain to enable it for the sites you trust.
Couple of niggles:
- 'about:blank': some sites warn that scripts need enabled for 'about:blank'. This is apparently because of iframes loading scripts from their parent page, but it means they're not safe to globally allow (since the parent page's domain could be anywhere)
- you can't jump to the source of the blocked script to see what you're blocking. This isn't a big problem, but the about:blank issue made it obvious that there's no detail available.
- NoScript's whitelisting model is way safer than the blacklisting used in (eg) firefox's cookie prefs; but there's no shared per-domain prefs, or even ie-style zones - you have to trawl through the prefs of different extensions like adblock, noscript, prefs/privacy/cookies/exceptions, prefs/content/popups... this needs unified.
these are all minor though. NoScript better than a poke in the eye with a sharp script.
|