Skip to main content

!Friendica Support
Ein anderer Friendica-User hat in irgend einem Thread von Problemen von Friendica mit No-Script berichtet...

Da erinnerte ich mich, dass ich vor laaaaanger Zeit Noscript deaktiviert hatte. DESWEGEN...
... und aktivierte es wieder.

Und tatsächlich:

Das ist sehr unschön.
Kann man das nicht anders lösen? Kann ja nicht sein, dass blockierte Scripts anderer Seiten die Darstellung von Friendica in ihren Grundfesten so derartig erschüttert...

!Friendica Support
Crazy-to-Bike
Crazy-to-Bike  
•

@jakob 🇦🇹 ✅

Yep. Das ist echt sehr unschön.
Wäre echt gut, wenn ein aktiviertes Noscript Friendica nicht so beeinflussen und damit ubedienbar machen würde.
Wobei das irgendwie nur beim mobilen Browser (hier Firefox) passiert.
Am Desktop ist bei mir auch Noscript aktiviert, und da passiert das nicht 🤷

@jakob 🇦🇹 ✅
alfredb
alfredb  
•
@jakob 🇦🇹 ✅ Das Problem habe ich leider auch.
@jakob 🇦🇹 ✅
Crazy-to-Bike
Crazy-to-Bike  
•

@alfredb @jakob 🇦🇹 ✅

Die Frage ist, was nun das kleinere Übel ist:
Friendica in Chrome nutzen, den ich sonst aus Gründen meide und deshalb da auch kein Noscript installiert ist, oder im Firefox NoScript deaktivieren, aber zumindest eben Firefox mit uBlock Origin zu nutzen.

Ich für meinen Teil denke, lieber Firefox.

@jakob 🇦🇹 ✅ @alfredb
jakob 🇦🇹 ✅
jakob 🇦🇹 ✅  
•

@Crazy-to-Bike @alfredb

Ich hab auch ublock aktiv und noscript deaktiviert... im firefox.

Chrome(ium) nutze ich wirklich nur alle paar heiligen Zeiten, wenn ich einen Gegenchrck für Funktionalität benötige.

https://contrachrome.com/comic/279/

@alfredb @Crazy-to-Bike
Crazy-to-Bike
Crazy-to-Bike  
•

@jakob 🇦🇹 ✅

Eben. Chrom(ium) ist die Pest in Sachen #Datenschutz. Voll die Datenschleuder - wie alles von #Google 🤦

@alfredb

#Datenschutz #google @jakob 🇦🇹 ✅ @alfredb
Hypolite Petovan
Hypolite Petovan  
•
@jakob 🇦🇹 ✅ Unfortunately Friendica simply doesn’t work with Noscript enabled.
@jakob 🇦🇹 ✅
jakob 🇦🇹 ✅
jakob 🇦🇹 ✅  
•

@Hypolite Petovan

Yes, that's sad... 😑

@Hypolite Petovan
Hypolite Petovan
Hypolite Petovan  
•
@jakob 🇦🇹 ✅ I'm not aware of a platform as complex as Friendica without a dependency on Javascript. A while ago I started writing a nojs frontend for Friendica as a thought experiment but there just are too many features to account for, many of which designed to only work with Javascript enabled.
@jakob 🇦🇹 ✅
jakob 🇦🇹 ✅
jakob 🇦🇹 ✅  
•

@Hypolite Petovan
i can imagine... this is difficult...

But what don't understand... why are content from other fediservers are loaded... i thought, in fediverse is only shown, what's on "my" server.

And why can content from a mastodon-server has influence on z-variables... so parts of the content is viewed over the topbars?

@Hypolite Petovan
Hypolite Petovan
Hypolite Petovan  
•
@jakob 🇦🇹 ✅ I would need a reproducible example to be able to tell you.
@jakob 🇦🇹 ✅
alfredb
alfredb  
•

@Hypolite Petovan I understand, and I think nobody wants to completely disable JavaScript. What I don't understand: Why have I to accept and run JavaScript that comes along in a discussion thread from any foreign node. Sorry to say that: For me, this smells like a design weakness of Friendica. Without any knowledge of the internals, it's my instance that renders the posts, IMHO there is no need to running scripts from unknown sources.

@jakob 🇦🇹 ✅

@Hypolite Petovan @jakob 🇦🇹 ✅
Hypolite Petovan
Hypolite Petovan  
•

@alfredb @jakob 🇦🇹 ✅ I haven't seen the exact situation where we run third-party scripts but I know of one Internet protocol that allows this: OEmbed. This is meant to embed third-party HTML snippets inside a webpage to display a summary representation of a remote resource.

It's not very popular because of the security risks and the release of platform-specific embed JS libraries that can be served locally to display an embedded tweet or Instagram post.

@jakob 🇦🇹 ✅ @alfredb
AndiS 🌞🍷🇪🇺
AndiS 🌞🍷🇪🇺  
•

The question is, does it help allowing scripts from the Friendica Server only? In that case I would'nt consider it to be a huge issue because I have to trust my Instance anyway.

If disabling 3rd party scripts causes an issue, it's a different story though..

I haven't used NoScript for a while now, so thats why I'm asking.

Hypolite Petovan
Hypolite Petovan  
•
@AndiS 🌞🍷🇪🇺 I forgot NoScript can be tweaked to allow disallow third-party scripts. It's possible we use them to display specific resources like embedded Youtube videos.
@AndiS 🌞🍷🇪🇺
jakob 🇦🇹 ✅
jakob 🇦🇹 ✅  
•

@Hypolite Petovan

Youtube was on the blocked list.
But most of them are Mastodon Domains...

@AndiS 🌞🍷🇪🇺

@Hypolite Petovan @AndiS 🌞🍷🇪🇺
Hypolite Petovan
Hypolite Petovan  
•
@jakob 🇦🇹 ✅ @AndiS 🌞🍷🇪🇺 Thank you for the elaboration, so far I have not been able to witness third-party Mastodon script included in my timeline so I'd have a hard time telling you why it's happening at the moment.
@AndiS 🌞🍷🇪🇺 @jakob 🇦🇹 ✅
⇧