[SOLVED] [NoScript] why the relation btw. object-tag, image-map and Java-Script.
by Michael Uplawski from LinuxQuestions.org on (#58RKM)
SOLVED.
The three presets proposed by NoScript are default, trusted and untrusted. Once set to my preferences, there is no more distinction possible between JavaScript, Object and other content and all are toggled by choosing a preset. While the handling of SVG is not entirely coherent, all is understood, now.
I leave the original post intact, the insight came minutes after my first publication, but after an hour of pondering. Writing about it, helped. ... Well ... Thank you.
---------------------------------------------------
Good morning.
I have noticed long ago that Tor-Browser will show a place-holder for <object/> elements and not execute clicks on an image-map, as long as JavaScript for the providing site is blocked.
NoScript is installed with both, Tor-Browser and the ordinary Firefox. In Firefox the behavior is exactly what I would expect, and neither image-maps nor <object/> elements are affected by a setting in NoScript, i.e. the authorization of JavaScript. The dialog which opens when I click on the place-holder for <object/> talks about authorizing object, but enables JavaScript, too, if I agree.
Would someone have an idea about why this is so ?
The question did not bother me until now, but I tend to use less often a genuine Firefox. Having two running browser-sessions, just because I have to click on an image-map, is a little dumb.
Addition
Also.., hyperlinks which are part of an SVG-image do not function, if JavaScript is disabled for the hosting site. This is a little complicated, as a target" attribute is honored, but the referenced content anyway not loaded.
The authorization is toggled either by a default-setting (site-specific) or a blunt untrusted".
The three presets proposed by NoScript are default, trusted and untrusted. Once set to my preferences, there is no more distinction possible between JavaScript, Object and other content and all are toggled by choosing a preset. While the handling of SVG is not entirely coherent, all is understood, now.
I leave the original post intact, the insight came minutes after my first publication, but after an hour of pondering. Writing about it, helped. ... Well ... Thank you.
---------------------------------------------------
Good morning.
I have noticed long ago that Tor-Browser will show a place-holder for <object/> elements and not execute clicks on an image-map, as long as JavaScript for the providing site is blocked.
NoScript is installed with both, Tor-Browser and the ordinary Firefox. In Firefox the behavior is exactly what I would expect, and neither image-maps nor <object/> elements are affected by a setting in NoScript, i.e. the authorization of JavaScript. The dialog which opens when I click on the place-holder for <object/> talks about authorizing object, but enables JavaScript, too, if I agree.
Would someone have an idea about why this is so ?
The question did not bother me until now, but I tend to use less often a genuine Firefox. Having two running browser-sessions, just because I have to click on an image-map, is a little dumb.
Addition
Also.., hyperlinks which are part of an SVG-image do not function, if JavaScript is disabled for the hosting site. This is a little complicated, as a target" attribute is honored, but the referenced content anyway not loaded.
The authorization is toggled either by a default-setting (site-specific) or a blunt untrusted".