public marks

PUBLIC MARKS from decembre with tags cross-site-scripping & proxy

04 April 2015 19:30

PRIVACY - EXTENSION NoScripts - What's ABE?

Q: I'm worried by the fact some sites require the akamai.net domain to be whitelisted. I'd prefer not to allow it everywhere, but only on some parent sites I trust. How can I do it? __ A: You can use ABE to this effect, by adding the following rule to your NoScript Options|Advanced|ABE USER ruleset: Site .akamai.net __ Accept INCLUSION from SELF++ ___ Accept INCLUSION from .trusted-site1.com .trusted-site2.com trusted-site3.com ____ Deny ___ Notice the leading dot "." before domains, which is syntactic sugar for site.com *.site.com, i.e. a domain and its subdomains. ____ It should also be noted that, independently from this rule, external scripts are never loaded from pages which don't belong to a whitelisted site, hence no malicious website you didn't explicitly whitelisted could execute scripts from akamai.net anyway. ___

decembre's TAGS related to tag cross-site-scripping

abe +   addon +   extension +   faq +   filter +   firewall-like +   noscript +   privacy +   proxy +   serurity +   sécurité +