Group: Free Software Foundation/Tasks/ModifyNoScript

From LibrePlanet
Jump to: navigation, search
(The task: ===Why NoScript?=== Why use NoScript as the starting point? There are other plugins, such as [https://addons.mozilla.org/fr/firefox/addon/javascript-options/ Javascript-Options], whic)
(== GNU LibreJS == GNU LibreJS is the first -and currently the only- project which implements the desired behaviour. * [https://www.gnu.org/software/librejs/ GNU LibreJS homepage])
 
(5 intermediate revisions by 3 users not shown)
Line 1: Line 1:
== The task ==
+
:''Note: a lot of discussion is taking place at [[Group talk:FSF/Tasks/ModifyNoScript]].''
  
Modify NoScript so it can detect and block nontrivial nonfree JavaScript code
+
== The Task: Block non-free javascript ==
  
* http://www.fsf.org/tasks/noscript
+
Many websites try to send non-free javascript to you when you browse them.  Most web-browsers, including free software ones, automatically execute this javascript.  Which leads to the problem of running non-free software without having had the choice or being aware of it.  This problem is described in more detail in Richard Stallman's essay [http://www.gnu.org/philosophy/javascript-trap.html The JavaScript Trap].
  
NoScript needs to check:
+
== GNU LibreJS ==
  
*If the Javascript code in the page is trivial, then it is ok.
+
GNU LibreJS is the first -and currently the only- project which implements the desired behaviour.
*If the Javascript code carries a recognized free license. it is ok
 
*Otherwise, reject it.
 
  
The definition of nontrivial:
+
* [https://www.gnu.org/software/librejs/ GNU LibreJS homepage]
  
# It makes an AJAX request
+
Mailing lists:
# It defines a method
+
* https://lists.gnu.org/mailman/listinfo/bug-librejs - main list, includes development general discussion
# It is loaded as or loads an external script
+
* https://lists.gnu.org/mailman/listinfo/help-librejs - includes user discussion
 
+
* http://lduros.net/cgi-bin/mailman/listinfo/librejs - Old, no longer used
(I would add: 4. It accesses or creates a cookie or any other form of local storage -Caz)
 
 
 
(http://www.gnu.org/philosophy/javascript-trap.html)
 
 
 
===Why NoScript?===
 
 
 
Why use NoScript as the starting point?  There are other plugins, such as [https://addons.mozilla.org/fr/firefox/addon/javascript-options/ Javascript-Options], which might be useful starting points.
 
 
 
Has the NoScript developer agreed to accept a patch for the functionality we're discussing?
 
  
 
== Interested parties ==
 
== Interested parties ==
Line 31: Line 20:
 
(Add your name, perhaps a link to your userpage) and some way for people to contact you.
 
(Add your name, perhaps a link to your userpage) and some way for people to contact you.
  
[[User:lduros]] lduros[at]member[dot]fsf[dot]org
+
# '''[[User:lduros]]''' lduros[at]member[dot]fsf[dot]org
 
+
# '''[[User:nvjacobo]]''' jacobo[at]gnu[dot]org
[[User:nvjacobo]] jacobo[at]gnu[dot]org
+
# '''Caz Downing-Bryant''' [[User:Vonkow/Profile]] caz[at]vonkow[dot]webfactional[dot]com
 
+
# '''dmonhntr''' kt54speed \\ at \\ ymail \\ dot \\ com
'''Caz Downing-Bryant''' [[User:Vonkow/Profile]] caz[at]vonkow[dot]webfactional[dot]com
+
# '''Ben''' [dh]{at}[fsf]{dot}[com]
 +
# '''Luisvega''' vega{at}member{dot}fsf{dot}org
 +
# '''EduardoFreitas''' eduardofilipef [at] gmail [dot] com
 +
# '''Esetzer''' use email address at top of [http://eliot-setzer.ni.yoru.to/resume/0.xhtml my resume]
  
'''dmonhntr''' kt54speed \\ at \\ ymail \\ dot \\ com
+
==Navigating the NoScript source code==
 
 
'''Ben''' [dh]{at}[fsf]{dot}[com]
 
 
 
'''Luisvega''' vega{at}member{dot}fsf{dot}org
 
 
 
'''EduardoFreitas''' eduardofilipef [at] gmail [dot] com
 
 
 
'''Esetzer''' use email address at top of [http://eliot-setzer.ni.yoru.to/resume/0.xhtml my resume]
 
 
 
 
 
'''Edit:''' Moved thoughts to discussion page -Caz
 
 
 
==Info==
 
  
 
You can download the source code of noscript here:
 
You can download the source code of noscript here:
Line 59: Line 38:
  
 
(RequestWatchdog.js seems to be the file that checks requests, and may be the one that we need to modify -Caz)
 
(RequestWatchdog.js seems to be the file that checks requests, and may be the one that we need to modify -Caz)
 
  
 
==dmonhntr's Modified NoScript==
 
==dmonhntr's Modified NoScript==

Latest revision as of 15:36, 31 December 2012

Note: a lot of discussion is taking place at Group talk:FSF/Tasks/ModifyNoScript.

The Task: Block non-free javascript

Many websites try to send non-free javascript to you when you browse them. Most web-browsers, including free software ones, automatically execute this javascript. Which leads to the problem of running non-free software without having had the choice or being aware of it. This problem is described in more detail in Richard Stallman's essay The JavaScript Trap.

GNU LibreJS

GNU LibreJS is the first -and currently the only- project which implements the desired behaviour.

Mailing lists:

Interested parties

(Add your name, perhaps a link to your userpage) and some way for people to contact you.

  1. User:lduros lduros[at]member[dot]fsf[dot]org
  2. User:nvjacobo jacobo[at]gnu[dot]org
  3. Caz Downing-Bryant User:Vonkow/Profile caz[at]vonkow[dot]webfactional[dot]com
  4. dmonhntr kt54speed \\ at \\ ymail \\ dot \\ com
  5. Ben [dh]{at}[fsf]{dot}[com]
  6. Luisvega vega{at}member{dot}fsf{dot}org
  7. EduardoFreitas eduardofilipef [at] gmail [dot] com
  8. Esetzer use email address at top of my resume

Navigating the NoScript source code

You can download the source code of noscript here:

It seems to be written in javascript, and the majority of the code is in a zip-file called noscript.jar in the "chrome" directory.

(RequestWatchdog.js seems to be the file that checks requests, and may be the one that we need to modify -Caz)

dmonhntr's Modified NoScript

dmonhntr's Test Page:

dmonhntr's Trivialness Script:

If you have any questions about the dmonhntr stuff above, just email me (dmonhntr) at address above.