[Greasemonkey] Making NoScript and Greasemonkey work together - a proposal.

[Anthony Lieuallen]

On 9/13/2006 5:06 AM, Mackey Stingray wrote:
>   I'd very much like to use GM upon web pages that I also use NoScript
> upon. Currently this doesn't work, and the reason it doesn't is that GM
> inserts a "<script>" tag into the web page's document...

That has not been true for a very long time.  Read below.

> 
>   function runBrowserScript(doc, jscode) {
>     var elm = doc.createElement("script");
>     elm.appendChild(doc.createTextNode(jscode));
...
>   - From GM's browser.xul

That is a VERY old version of GreaseMonkey.  And a rather insecure one 
at that.

>   There's an easy way around this that you already know about....
> 
> function runBrowserScript(doc, jscode) {
>   var content = doc.getElementById("appcontent");
>   if(content) {
>     content.addEventListener("DOMContentLoaded", function(){ jscode }, false);
>  }
> }

This also would be terribly insecure, because of the extra APIs that GM 
scripts get access to, and the fact that this would expose them to 
content pages.  Again, read the link below.

May I ask what version of greasemonkey you are using?  And suggest that 
you upgrade to 0.6.5?

https://addons.mozilla.org/firefox/748/

See some description of the security and feature updates as of 0.5:

http://greaseblog.blogspot.com/2005/07/greasemonkey-05-beta.html