Any insights on this?
Ask HN: NoScript (Firefox) is asking for ever expanding permissions. Why?
1–7 of 7 posts
Re: Ask HN: NoScript (Firefox) is asking for ever expanding permissions. Why?
#2perhaps the permission system is becoming more fine grained on your system
Re: Ask HN: NoScript (Firefox) is asking for ever expanding permissions. Why?
#3Which OS? I haven't seen it on Linux or Mac OS High Sierra perhaps the permission system is becoming more fine grained on your system
It wants perm to “Access ip address and host information”. Why does no script want this?
ps: just checking and it already has in FF
+ Access your data for all websites
+ Access browser tabs
+ Store unlimited amount of client-side data
+ Access browser activity during navigation
???
Is this all OK?
Re: Ask HN: NoScript (Firefox) is asking for ever expanding permissions. Why?
#4Which OS? I haven't seen it on Linux or Mac OS High Sierra perhaps the permission system is becoming more fine grained on your system
HighSierra running FF 72.0.2 It wants perm to “Access ip address and host information”. Why does no script want this? ps: just checking and it already has in FF + Access your data for all websites + Access browser tabs + Store unlimited amount of client-side data + Access browser activity during navigation ??? Is this all OK?
From the noscript extension page it wants the flllowing:
Access browser tabs
Store unlimited amount of client-side data
Access browser activity during navigation
Access your data for all websites
Re: Ask HN: NoScript (Firefox) is asking for ever expanding permissions. Why?
#5Earlier quoted context omitted.
HighSierra running FF 72.0.2 It wants perm to “Access ip address and host information”. Why does no script want this? ps: just checking and it already has in FF + Access your data for all websites + Access browser tabs + Store unlimited amount of client-side data + Access browser activity during navigation ??? Is this all OK?
So far it makes sense to me. Perhaps look into the changelist for something related. https://addons.mozilla.org/en-US/firefox/addon/noscript/vers... From the noscript extension page it wants the flllowing: Access browser tabs Store unlimited amount of client-side data Access browser activity during navigation Access your data for all websites
Re: Ask HN: NoScript (Firefox) is asking for ever expanding permissions. Why?
#6Earlier quoted context omitted.
So far it makes sense to me. Perhaps look into the changelist for something related. https://addons.mozilla.org/en-US/firefox/addon/noscript/vers... From the noscript extension page it wants the flllowing: Access browser tabs Store unlimited amount of client-side data Access browser activity during navigation Access your data for all websites
that’s exactly what the perms are right now. question I am asking, since I have always blindly trusted No Script, is how “accessing browser activity during navigation” related to the simple job of blocking scripts from domain x? And now it wants ip address info too? Why? Keep in mind it worked all these years without additional perms. Most of those are from the last expanded permissions.
From the Firefox documentation:
https://support.mozilla.org/en-US/kb/permission-request-mess...
The extension could listen for the steps the browser takes to navigate from a link to another page. The extension could then provide new features for the content on the page.
Extensions requesting this permission might:
Detect when streamed videos are about to play and provide a download feature Look for and prevent ad pop-ups from opening
Re: Ask HN: NoScript (Firefox) is asking for ever expanding permissions. Why?
#7Earlier quoted context omitted.
that’s exactly what the perms are right now. question I am asking, since I have always blindly trusted No Script, is how “accessing browser activity during navigation” related to the simple job of blocking scripts from domain x? And now it wants ip address info too? Why? Keep in mind it worked all these years without additional perms. Most of those are from the last expanded permissions.
I suggest you inspect the changelog and any available code for answers you’re looking for. Ensure you don’t have a malicious alternate version. From the Firefox documentation: https://support.mozilla.org/en-US/kb/permission-request-mess... The extension could listen for the steps the browser takes to navigate from a link to another page. The extension could then provide new features for the content on the page. Exten…