Skip to main content


!Friendica Support
Ein anderer Friendica-User hat in irgend einem Thread von Problemen von Friendica mit No-Script berichtet...

Da erinnerte ich mich, dass ich vor laaaaanger Zeit Noscript deaktiviert hatte. DESWEGEN...
... und aktivierte es wieder.

Und tatsรคchlich:

Das ist sehr unschรถn.
Kann man das nicht anders lรถsen? Kann ja nicht sein, dass blockierte Scripts anderer Seiten die Darstellung von Friendica in ihren Grundfesten so derartig erschรผttert...

in reply to jakob ๐Ÿ‡ฆ๐Ÿ‡น โœ…

@jakob ๐Ÿ‡ฆ๐Ÿ‡น โœ…

Yep. Das ist echt sehr unschรถn.
Wรคre echt gut, wenn ein aktiviertes Noscript Friendica nicht so beeinflussen und damit ubedienbar machen wรผrde.
Wobei das irgendwie nur beim mobilen Browser (hier Firefox) passiert.
Am Desktop ist bei mir auch Noscript aktiviert, und da passiert das nicht ๐Ÿคท

in reply to alfredb

@alfredb @jakob ๐Ÿ‡ฆ๐Ÿ‡น โœ…

Die Frage ist, was nun das kleinere รœbel ist:
Friendica in Chrome nutzen, den ich sonst aus Grรผnden meide und deshalb da auch kein Noscript installiert ist, oder im Firefox NoScript deaktivieren, aber zumindest eben Firefox mit uBlock Origin zu nutzen.

Ich fรผr meinen Teil denke, lieber Firefox.

in reply to Crazy-to-Bike

@Crazy-to-Bike @alfredb

Ich hab auch ublock aktiv und noscript deaktiviert... im firefox.

Chrome(ium) nutze ich wirklich nur alle paar heiligen Zeiten, wenn ich einen Gegenchrck fรผr Funktionalitรคt benรถtige.

https://contrachrome.com/comic/279/

in reply to jakob ๐Ÿ‡ฆ๐Ÿ‡น โœ…

@jakob ๐Ÿ‡ฆ๐Ÿ‡น โœ… I'm not aware of a platform as complex as Friendica without a dependency on Javascript. A while ago I started writing a nojs frontend for Friendica as a thought experiment but there just are too many features to account for, many of which designed to only work with Javascript enabled.
in reply to Hypolite Petovan

@Hypolite Petovan
i can imagine... this is difficult...

But what don't understand... why are content from other fediservers are loaded... i thought, in fediverse is only shown, what's on "my" server.

And why can content from a mastodon-server has influence on z-variables... so parts of the content is viewed over the topbars?

in reply to Hypolite Petovan

@Hypolite Petovan I understand, and I think nobody wants to completely disable JavaScript. What I don't understand: Why have I to accept and run JavaScript that comes along in a discussion thread from any foreign node. Sorry to say that: For me, this smells like a design weakness of Friendica. Without any knowledge of the internals, it's my instance that renders the posts, IMHO there is no need to running scripts from unknown sources.

@jakob ๐Ÿ‡ฆ๐Ÿ‡น โœ…

in reply to alfredb

@alfredb @jakob ๐Ÿ‡ฆ๐Ÿ‡น โœ… I haven't seen the exact situation where we run third-party scripts but I know of one Internet protocol that allows this: OEmbed. This is meant to embed third-party HTML snippets inside a webpage to display a summary representation of a remote resource.

It's not very popular because of the security risks and the release of platform-specific embed JS libraries that can be served locally to display an embedded tweet or Instagram post.

in reply to Hypolite Petovan

The question is, does it help allowing scripts from the Friendica Server only? In that case I would'nt consider it to be a huge issue because I have to trust my Instance anyway.

If disabling 3rd party scripts causes an issue, it's a different story though..

I haven't used NoScript for a while now, so thats why I'm asking.

in reply to AndiS ๐ŸŒž๐Ÿท๐Ÿ‡ช๐Ÿ‡บ

@AndiS ๐ŸŒž๐Ÿท๐Ÿ‡ช๐Ÿ‡บ I forgot NoScript can be tweaked to allow disallow third-party scripts. It's possible we use them to display specific resources like embedded Youtube videos.
in reply to jakob ๐Ÿ‡ฆ๐Ÿ‡น โœ…

@jakob ๐Ÿ‡ฆ๐Ÿ‡น โœ… @AndiS ๐ŸŒž๐Ÿท๐Ÿ‡ช๐Ÿ‡บ Thank you for the elaboration, so far I have not been able to witness third-party Mastodon script included in my timeline so I'd have a hard time telling you why it's happening at the moment.
โ‡ง