[Flashblock] Flashblock and disabled javascript

[liam321 at 123mail.org]

Hi!

Unfortunately, Flashblock does *not* work together with NoScript (if
javascript is disabled by NoScript on the "current site") -- *even
though* "chrome:" is included within the NoScript whitelist.


When I "Temporarily allow" the "current site" in the NoScript menu,
Flashblock starts working (as was expected).


So it seems that the actual javascript running within Flashblock is
"considered" (by NoScript) to run within the "current site" domain, not
within that "chrome:" url. Is this the behaviour you would expect? Or is
it weird?


I would have hoped that the Flashblock javascript would have been
"considered" to run within that "chrome:" url (though with content
(untrusted) priviliges instead of chrome priviliges) but that seems to
not be the case.


On the NoScript web-site FAQ, it is stated that "FlashBlock will work on
pages where JavaScript is allowed. Obviously enough, it would be more
useful blocking Flash on sites you don't trust." So this seems to be a
known problem over there.. 


Perhaps I should double-check with the NoScript author anyway if there
is some special workaround hack he can use to allow the FlashBlock
JavaScript code..(?)


I've tested with late(st?) versions of Deer Park (nightly from trunk),
FlashBlock and NoScript:

o) Deer Park "Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.8b2)
Gecko/20050705 Firefox/1.0+" 
o) Flashblock 1.3.1
o) NosScript 1.0.9


(I haven't yet tested uninstallation of FlashBlock with this FF build.
Should I get back here when I have something to report on that? (Does
FlashBlock still make changes to userContent.css?))


Cheers
Hugo


On Mon, 4 Jul 2005 02:01:28 +0800, "Philip Chee" <philip.chee at gmail.com>
said:
> On 7/4/05, liam321 at 123mail.org <liam321 at 123mail.org> wrote:
> 
> >> Perhaps you could talk to the NoScript folks to see if they can
> >> specifically whitelist Flashblock? Our XBL lives in a chrome URL
> >> and not a web URL if that will help.
> 
> > I will do that. What should I ask them more specifically? What is the
> > exact chrome URL that Flashblock lives in, that should be whitelisted by
> > NoScript?
> 
> Somewhere in our css we have the following:
> 
> { -moz-binding:
> url("chrome://flashblock/content/flashblock.xml#flash") !important; }
> 
> Phil

-- 
http://www.fastmail.fm - Access all of your messages and folders
                          wherever you are