[Flashblock] Flashblock and disabled javascript

[liam321 at 123mail.org]

On Wed, 6 Jul 2005 15:00:55 +0800, "Philip Chee"
<philip.chee at gmail.com> said:
> On 7/6/05, liam321 at 123mail.org <liam321 at 123mail.org> wrote:
>
> > Perhaps I should double-check with the NoScript author anyway if
> > there is some special workaround hack he can use to allow the
> > FlashBlock JavaScript code..(?)
>
> Probably best as he understands his code better than anyone else.
>

Giorgio Maone says no. I asked on the NoScript "forum" (which is
actually a Mozillazine thread) and I quoted some of what you wrote here
on the list.. hope that was ok? Here's a link:

http://forums.mozillazine.org/viewtopic.php?t=265889&postorder=desc


I can't figure out how to link directly to Maones response, so I'll
paste
some of it here:

[quote]

hugoheden wrote:

> So it seems that the javascript running within Flashblock is
> "considered" (by NoScript) to run within the "current site" domain,
> not within a "chrome:" url. Is that correct?

Yes, it is correct. To be even more correct, FlashBlock is "considered"
by *Firefox* to run withing the "current site" domain, rather than in
the privileged chrome. NoScript leverages on the Firefox security
infrastructure to guarantee that scripts are prevented from running
(this, for obvious reason, is the most reliable and cross-platform
approach). On the other hand, for the same reason it is limited by
Firefox limits and bugs.

[...]

The fact FlashBlock XBL lives in a chrome URL leaves hope for a solution
if and when the Mozilla bug 236839 is fixed. Notice that this bug is the
same which prevents GreaseMonkey from working where JavaScript is
disabled...

[/quote]


Well, well. Bad luck for me. 


Cheers
Hugo


-- 
http://www.fastmail.fm - And now for something completely different