[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Noscript JAR Settings?



Noscript default settings under JAR tab marked as NOT blocked are both no script domains in the box within this section and the entry at the very bottom of the JAR section titled "pattern matching sample". With default settings, wouldn't this allow a rogue exit node to hijack or control Tor client's browser sessions by faking the noscript domain with a method?

What should these default settings in the JAR section be changed to? Should the entries in these sections be highlighted and removed before Tor use? What harm is there in Noscript performance should these two sections within the JAR area of Noscript configuration be cleared or left alone with default values?
***********************************************************************
To unsubscribe, send an e-mail to majordomo@xxxxxxxxxxxxxx with
unsubscribe or-talk    in the body. http://archives.seul.org/or/talk/