3 ms·
I used to do this. It broke too often when doing credit card purchases though... it would take multiple attempts to complete a purchase and figure out which dom
by argomo 5y ago
I used to do this. It broke too often when doing credit card purchases though... it would take multiple attempts to complete a purchase and figure out which domains needed to be enabled. Sometimes the status would be left ambiguous. Once I double-spent, but fortunately it was a cancellable reservation. I suppose you can do better if you just spend at a few key sites.
- SkyMarshal 5y ago>it would take multiple attempts to complete a purchase and figure out which domains needed to be enabled. Yeah I went through this too, figuring out all the CC purchase redirects. Some are just idiotic to the point I wish govts would pass a law mandating zero redirects for online purchases. Stripe, Paypal, Square, Braintree and a few others do payments just fine without the redirects so it's clearly possible. But eventually even that gets solved and the redirects get whitelisted. Haven't encountered this problem for a long time.
- andrepd 5y agoSimply "enable all" for pesky cases like that.
- cartoonworld 5y agoI have used NoScript for over a decade and I've been bitten by this too, but I've noticed that it has gotten better. CC processors seem to have encountered enough crappy browsers and broken JS implimentations that they've improved their services in the last half dozen years or so. That said, when there's something old, important, and/or dumb looking, I usually spawn a new Firefox container (using Multi-Account Container plugin) and use NoScript's temporary bypass function.
- smichel17 5y agoI do it with uMatrix. I usually go up to the "all sites" level and enable most everything before going through a credit card payment flow, for this reason. Security is only part of my motivation, though, and not the main part -- I mostly do it because it protects me by default from all the pop-up type crap that so many websites foist on you. Yes, it's a pain to un-break sites sometimes. But I resent it less than going through the equivalent pain in "privacy settings" popups, wriggling chat widgets, "ate you sure you don't want to sign up for our newsletter?" nags, etc. Websites are already broken; as long as that's true, I'd rather be in control of why.