Which is the principle for LibreJS to approve JavaScript functions and/or files? A license mention? A signature? A well-known functions comparison? A code analysis? It replaces funcions?
El 22/02/18 a les 06:21, Ivan Zaigralin ha escrit: > I think NoScript is an essential privacy+security tool with a feature set not > fully replicated by icecat, so including it would not hurt anyone :) > > It should be considered that LibreJS, which is enabled by default, is already > intended to block all non-free JavaScript. So at least from the gnuzilla's > point of view, all non-free JavaScript is already disabled, and there seems > to > be no danger in NoScript whitelisting some unsavory domains. The same > consideration makes it theoretically unimportant to turn off the JavaScript > completely via browser config. > > However, LibreJS cannot possibly detect non-free software with any kind of > reliability, and it is easy to argue that drive-by-downloads, which are un- > auditable by their very nature, are non-free no matter what license is > attached to them. To wit, LibreJS will incorrectly mark an obfuscated piece > of > GPL-licensed code as free every time. So from the practical point of view, > starting out with all JavaScript disabled is the way to go. > > On Wednesday, February 21, 2018 23:04:48 Julie Marchant wrote: >> On 2018年02月21日 22:02, [email protected] wrote: >>> Hmmm...If that'd be the case, is it well worth considering "NoScript" >>> and "HTTPS Everywhere" as part of the default extensions suite? >> >> I still think shipping with JavaScript disabled entirely by default >> would be preferable. Perhaps add an extension with a "danger button" >> that allows all scripts on a particular page to run (like LibreJS's >> similar option, instead of being like what NoScript does). >> >> Note regarding NoScript: it would have to be modified, since its default >> settings whitelist dozens of websites serving proprietary JavaScript >> code. Anyway, I wouldn't see much point. >> >> -- >> Julie Marchant >> https://onpon4.github.io >> >> >> -- >> http://gnuzilla.gnu.org -- http://gnuzilla.gnu.org
