4 ms·
Sites that allow users [to have significant control over] personalised subdomains are also problematic for things like NoScript and other whitelisting tools. Si
by shabble 14y ago
Sites that allow users [to have significant control over] personalised subdomains are also problematic for things like NoScript and other whitelisting tools. Since I have github.com permitted, all the subdomains inherit that permission.
I'm not even sure what a good model/UI would be to selectively white/blacklist subdomains.
- gsiener 14y agoMaybe github should use a different TLD for pages? Like Githubpages.com ?
- alter8 14y agoThat is a problem only because Github uses the root domain for its own pages. They could rather use www.github.com. To solve your case on NoScript, whitelist the full address https://github.com/ https://github.com/ and that will keep http subdomains out.