Group: Free Software Foundation/Tasks/ModifyNoScript
m (dmonhntr's Modified NoScript) |
(→The task: ===Why NoScript?=== Why use NoScript as the starting point? There are other plugins, such as [https://addons.mozilla.org/fr/firefox/addon/javascript-options/ Javascript-Options], whic) |
||
| Line 5: | Line 5: | ||
* http://www.fsf.org/tasks/noscript | * http://www.fsf.org/tasks/noscript | ||
| − | + | NoScript needs to check: | |
| − | NoScript needs to | ||
*If the Javascript code in the page is trivial, then it is ok. | *If the Javascript code in the page is trivial, then it is ok. | ||
| − | |||
*If the Javascript code carries a recognized free license. it is ok | *If the Javascript code carries a recognized free license. it is ok | ||
| − | |||
*Otherwise, reject it. | *Otherwise, reject it. | ||
The definition of nontrivial: | The definition of nontrivial: | ||
| − | + | # It makes an AJAX request | |
| + | # It defines a method | ||
| + | # It is loaded as or loads an external script | ||
| − | + | (I would add: 4. It accesses or creates a cookie or any other form of local storage -Caz) | |
| − | + | (http://www.gnu.org/philosophy/javascript-trap.html) | |
| − | + | ===Why NoScript?=== | |
| + | |||
| + | Why use NoScript as the starting point? There are other plugins, such as [https://addons.mozilla.org/fr/firefox/addon/javascript-options/ Javascript-Options], which might be useful starting points. | ||
| − | + | Has the NoScript developer agreed to accept a patch for the functionality we're discussing? | |
== Interested parties == | == Interested parties == | ||
Revision as of 08:55, 23 September 2011
The task
Modify NoScript so it can detect and block nontrivial nonfree JavaScript code
NoScript needs to check:
- If the Javascript code in the page is trivial, then it is ok.
- If the Javascript code carries a recognized free license. it is ok
- Otherwise, reject it.
The definition of nontrivial:
- It makes an AJAX request
- It defines a method
- It is loaded as or loads an external script
(I would add: 4. It accesses or creates a cookie or any other form of local storage -Caz)
(http://www.gnu.org/philosophy/javascript-trap.html)
Why NoScript?
Why use NoScript as the starting point? There are other plugins, such as Javascript-Options, which might be useful starting points.
Has the NoScript developer agreed to accept a patch for the functionality we're discussing?
Interested parties
(Add your name, perhaps a link to your userpage) and some way for people to contact you.
User:lduros lduros[at]member[dot]fsf[dot]org
User:nvjacobo jacobo[at]gnu[dot]org
Caz Downing-Bryant User:Vonkow/Profile caz[at]vonkow[dot]webfactional[dot]com
dmonhntr kt54speed \\ at \\ ymail \\ dot \\ com
Ben [dh]{at}[fsf]{dot}[com]
Luisvega vega{at}member{dot}fsf{dot}org
EduardoFreitas eduardofilipef [at] gmail [dot] com
Esetzer use email address at top of my resume
Edit: Moved thoughts to discussion page -Caz
Info
You can download the source code of noscript here:
It seems to be written in javascript, and the majority of the code is in a zip-file called noscript.jar in the "chrome" directory.
(RequestWatchdog.js seems to be the file that checks requests, and may be the one that we need to modify -Caz)
dmonhntr's Modified NoScript
- http://webpages.charter.net/kidzplay/NoScript/FreeScript/freescript%20v0.2.0b.xpi (updated 14:36, 9 September 2011 (EDT))
dmonhntr's Test Page:
dmonhntr's Trivialness Script:
If you have any questions about the dmonhntr stuff above, just email me (dmonhntr) at address above.
