{"update": {"autokarma": false, "autotime": false, "stable_karma": 2, "stable_days": 0, "unstable_karma": -2, "require_bugs": false, "require_testcases": false, "display_name": "", "notes": "NOTE: all packaged Firefox add-ons are affected by bug fedora#1508827 , please don't give negative karma here, but add yourself to the bug instead.\n\nThis update brings back the SeaMonkey support with version 5.1.8.3, which is still maintained until June 2018.\n\nChanges since 10.1.2:\n\n* [XSS] Improved sensitivity of JSON whitelisting (thanks\n@SamuraiFoochs for reporting)\n* [XSS] Improved specificity of nested URL checks (thanks\n@SamuraiFoochs for reporting)\n* New configuration export implementation, more convoluted\nbut not requiring the \"downloads\" permission \n* Fixed some XSS false positives\n* Fixed out of scale rendering regression on high DPI screens\n* Fix for linux rendering performance issues\n* First \"Quantum\" release candidate with Android support\n* Inverted order of domains vs full sites in popup\n* Settings import functionality, backward compatible with NoScript 5 formats\n* Settings export functionality\n* [XSS] The filter now automatically skips embedded documents which would normally be blocked\n* Base domain matching now uses a single dot rule for unknown, private or \"fake\" TLDs (e.g. www.acme.corp \u2192 acme.corp)\n* [XSS] Fixed regression from 10.1.5.6rc2 (thanks Masato Kinugava for reporting)\n* Better feedback for errors in the policy's debug JSON view (thanks E-Raser for RFE)\n* removed yandex.st from default whitelist (see https://forums.informaction.com/viewtopic.php?t=23655)\n* [XSS] Streamlined multiple unescaping standards handling\n* [XSS] Generalized work-around for browser's URL parsing oddities (thanks Masato Kinugava for reporting)\n* \"Temporarily set top-level sites to TRUSTED\" option\n* [XSS] Fixed user choices forgot across browser sessions\n* [UI] Clicking on the domain label now opens the \"Security and privacy info\" webpage (like middle click on \"Classic\").\n* \"Reset to Defaults\" button in the options window\n* Improved content script initialization logic (thanks Rob Wu for suggestions)\n* [XSS] Fixed 2nd level interactive bypass (thanks Masato Kinugava for reporting)\n* Fixed sites manually added from the Options textbox don't stick (thanks Just_Golem for reporting)\n* [UI] Clicking on the domain label now opens the \"Security and privacy info\" webpage (like middle click on \"Classic\").\n* \"Reset to Defaults\" button in the options window\n* Improved content script initialization logic (thanks Rob Wu for suggestions)\n* [XSS] Fixed 2nd level interactive bypass (thanks Masato Kinugava for reporting)\n* Fixed sites manually added from the Options textbox don't stick (thanks Just_Golem for reporting)\n* Fixed regression causing NoScript to ask to reload pages in order to show permissions more than once upon installation\n* Removed most animations causing older system to lag when large permissions lists are displayed in Options\n* Improved work-around for blank windows on Linux Firefox bug\n* Fixed XSS false positives on POST requests without data\n* Fixed regression from new \"fail fast\" XSS filter main loop, causing cross-site requests to Google to trigger false positives (thanks Steve M for reporting)\n* [XSS] Added \"Always block requests from ... to ...\" in XSS warning prompt\n* [XSS] Fixed url decoding bug (thanks Masato Kinugawa for reporting)\n* Fixed some blocked items not reported in the UI (thanks Bo Elam for reporting)\n* Changed the CSP internal report URI to noscript-csp.invalid (thanks Tom Schuster Mario Heiderich for RFE)\n* Removed unused MSE detection code (thanks Rob Wu for reporting)\n* Fixed script enablement feedback dependant on page's own CSP (thanks Rob Wu for reporting)\n* Fixed MSE detection injection using window.eval (thanks Rob Wu for reporting)\n* Fixed window being resized and NoScript UI shown in a separate popup when triggered on a maximized window\n* General performance improvement by removing unnecessary asynchronous webRequest listeners\n* Hotfix for wiped TRUSTED permissions\n* Hotfix for NoScript failing to load if XSS was disabled in previous session\n* Fixed immutable permissions for TRUSTED and UNTRUSTED presets negating all the others (thanks Stefan Scholl for reporting)\n* Work-around for Moz Bug #1402110 (thanks David Ross for reporting)\n* Fixed XSS whitelist not being cleared from Options\n* Fixed XSS whitelist trying to using sync even if disabled (thanks Rob Wu for reporting)\n* Work-around for Firefox not displaying NOSCRIPT elements on pages where scripts are blocked by CSP\n* The Alt+Shift+N shortcut now opens the NoScript UI also on windows with no toolbars containing NoScript's icon\n* \"unsafe\" (non-HTTPS) matching is now automatically selected on non-HTTPS pages (fixes the perception that you set a site to TRUSTED and it reverted to DEFAULT)\n* Full addresses are shown again to be choosen in UI, together with base domains\n* Better auto-reload logic\n* Fixed NoScript back-end to work also if sync storage is disabled (thanks Rob Wu for reporting)\n* Fixed potential fingerprinting through placeholder icon (thanks Rob Wu for reporting) \n\nChanges since 5.1.7:\n\n* [XSS] Fixed regression (thanks Masato Kinugava for report)\n* [ABE] Restored Palemoon compatibility (thanks barbaz for patch)\n* [ABE] Fixed ruleset persistence (thanks barbaz for patch)\n* removed yandex.st from default whitelist (see https://forums.informaction.com/viewtopic.php?t=23655)\n* [XSS] Streamlined multiple unescaping standards handling\n* [XSS] Fixed 2nd level interactive bypass (thanks Masato Kinugava for reporting)\n", "type": "bugfix", "status": "stable", "request": null, "severity": "low", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2017-12-19 22:42:11", "date_modified": "2017-12-19 22:44:11", "date_approved": null, "date_testing": "2017-12-21 20:29:53", "date_stable": "2018-01-02 14:44:38", "alias": "FEDORA-2017-d9343fad55", "test_gating_status": null, "from_tag": null, "date_pushed": "2018-01-02 14:44:38", "meets_testing_requirements": false, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2017-d9343fad55", "title": "mozilla-noscript-10.1.6-1.fc26", "version_hash": "e1477da03aa4bb5d2c55d2dc20237a5316ed6a16", "release": {"name": "F26", "long_name": "Fedora 26", "version": "26", "id_prefix": "FEDORA", "branch": "f26", "dist_tag": "f26", "stable_tag": "f26-updates", "testing_tag": "f26-updates-testing", "candidate_tag": "f26-updates-candidate", "pending_signing_tag": "f26-signing-pending", "pending_testing_tag": "f26-updates-testing-pending", "pending_stable_tag": "f26-updates-pending", "override_tag": "f26-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": null, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "rathann", "email": "dominik@greysector.net", "id": 237, "avatar": "https://seccdn.libravatar.org/avatar/852ad2034e4d2de4eec5ee7c54530a61535edb605c2e9269cd07682a32fbdbaa?s=24&d=retro", "openid": "rathann.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "scitech_sig"}, {"name": "scitech"}, {"name": "websites-apps-cms"}, {"name": "multimedia-sig"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by rathann. ", "timestamp": "2017-12-19 22:42:11", "update_id": 104497, "user_id": 91, "id": 711080, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has obsoleted [mozilla-noscript-10.1.5.8-1.fc26](https://bodhi.fedoraproject.org/updates/FEDORA-2017-8ee9e1dc42), and has inherited its bugs and notes.", "timestamp": "2017-12-19 22:42:16", "update_id": 104497, "user_id": 91, "id": 711084, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "rathann edited this update.", "timestamp": "2017-12-19 22:44:10", "update_id": 104497, "user_id": 91, "id": 711086, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2017-12-21 21:12:50", "update_id": 104497, "user_id": 91, "id": 711560, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for batched by rathann. ", "timestamp": "2017-12-28 20:59:01", "update_id": 104497, "user_id": 91, "id": 713228, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi. ", "timestamp": "2018-01-02 03:04:08", "update_id": 104497, "user_id": 91, "id": 714173, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2018-01-02 16:28:01", "update_id": 104497, "user_id": 91, "id": 714496, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "mozilla-noscript-10.1.6-1.fc26", "signed": true, "release_id": 16, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1524389, "title": "mozilla-noscript-10.1.5.7 is available", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 709577, "bug_id": 1524389, "comment": {"karma": 1, "karma_critpath": 0, "text": "works for me", "timestamp": "2017-12-17 06:27:21", "update_id": 104339, "user_id": 2393, "id": 709577, "testcase_feedback": [], "user": {"name": "mastaiza", "email": "mastaizawfm@gmail.com", "id": 2393, "avatar": "https://seccdn.libravatar.org/avatar/ff005c474a9f0bdbc24950d50dc51aba554d23bb517f4c95fcf505be5334aaf2?s=24&d=retro", "openid": "mastaiza.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 709723, "bug_id": 1524389, "comment": {"karma": 0, "karma_critpath": 0, "text": "Is this supposed to work with Firefox 56? It does not (though the latest version of mozilla-https-everywhere does). Under Addons it shows Version 10.1.5.8 which is disabled (instead of Version 5.1.8.3).", "timestamp": "2017-12-17 22:36:03", "update_id": 104339, "user_id": 303, "id": 709723, "testcase_feedback": [], "user": {"name": "robatino", "email": "arobatino@gmail.com", "id": 303, "avatar": "https://seccdn.libravatar.org/avatar/bb8d454eee868b05bbdfef07cbba898ae0ea9c238d3d8001483d8c6593322eb5?s=24&d=retro", "openid": "robatino.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "qa-deltaisos"}]}}}, {"karma": 0, "comment_id": 709724, "bug_id": 1524389, "comment": {"karma": 0, "karma_critpath": 0, "text": "@robatino, no, the XUL version is installed in SeaMonkey-specific folder. Firefox will \"see\" only the WebExtension version, so this works only with FF57+.", "timestamp": "2017-12-17 22:40:11", "update_id": 104339, "user_id": 237, "id": 709724, "testcase_feedback": [], "user": {"name": "rathann", "email": "dominik@greysector.net", "id": 237, "avatar": "https://seccdn.libravatar.org/avatar/852ad2034e4d2de4eec5ee7c54530a61535edb605c2e9269cd07682a32fbdbaa?s=24&d=retro", "openid": "rathann.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "scitech_sig"}, {"name": "scitech"}, {"name": "websites-apps-cms"}, {"name": "multimedia-sig"}]}}}, {"karma": 0, "comment_id": 709887, "bug_id": 1524389, "comment": {"karma": 0, "karma_critpath": 0, "text": "@robatino I'm not doing anything different than mozilla-https-everywhere package, so either the WebExtension version is somehow compatible with FF56 or you have a local copy of the add-on in your home directory.", "timestamp": "2017-12-18 08:14:29", "update_id": 104339, "user_id": 237, "id": 709887, "testcase_feedback": [], "user": {"name": "rathann", "email": "dominik@greysector.net", "id": 237, "avatar": "https://seccdn.libravatar.org/avatar/852ad2034e4d2de4eec5ee7c54530a61535edb605c2e9269cd07682a32fbdbaa?s=24&d=retro", "openid": "rathann.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "scitech_sig"}, {"name": "scitech"}, {"name": "websites-apps-cms"}, {"name": "multimedia-sig"}]}}}, {"karma": 0, "comment_id": 709899, "bug_id": 1524389, "comment": {"karma": 0, "karma_critpath": 0, "text": "@rathann: I'm pretty sure I never installed it except as the package mozilla-https-everywhere, so it must be compatible with FF56. Addons shows Version 2017.11.21 (corresponding to the Fedora package), enabled (and not \"LEGACY\"). No big deal. I'm using mozilla-noscript-5.1.4-1.fc27.noarch.rpm for now.", "timestamp": "2017-12-18 08:27:26", "update_id": 104339, "user_id": 303, "id": 709899, "testcase_feedback": [], "user": {"name": "robatino", "email": "arobatino@gmail.com", "id": 303, "avatar": "https://seccdn.libravatar.org/avatar/bb8d454eee868b05bbdfef07cbba898ae0ea9c238d3d8001483d8c6593322eb5?s=24&d=retro", "openid": "robatino.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "qa-deltaisos"}]}}}, {"karma": 0, "comment_id": 711232, "bug_id": 1524389, "comment": {"karma": 1, "karma_critpath": 0, "text": "works for me", "timestamp": "2017-12-20 14:23:05", "update_id": 104496, "user_id": 2393, "id": 711232, "testcase_feedback": [], "user": {"name": "mastaiza", "email": "mastaizawfm@gmail.com", "id": 2393, "avatar": "https://seccdn.libravatar.org/avatar/ff005c474a9f0bdbc24950d50dc51aba554d23bb517f4c95fcf505be5334aaf2?s=24&d=retro", "openid": "mastaiza.id.fedoraproject.org", "groups": []}}}]}, {"bug_id": 1526199, "title": "User experience changed - No longer present for SeaMonkey users", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 709577, "bug_id": 1526199, "comment": {"karma": 1, "karma_critpath": 0, "text": "works for me", "timestamp": "2017-12-17 06:27:21", "update_id": 104339, "user_id": 2393, "id": 709577, "testcase_feedback": [], "user": {"name": "mastaiza", "email": "mastaizawfm@gmail.com", "id": 2393, "avatar": "https://seccdn.libravatar.org/avatar/ff005c474a9f0bdbc24950d50dc51aba554d23bb517f4c95fcf505be5334aaf2?s=24&d=retro", "openid": "mastaiza.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 709723, "bug_id": 1526199, "comment": {"karma": 0, "karma_critpath": 0, "text": "Is this supposed to work with Firefox 56? It does not (though the latest version of mozilla-https-everywhere does). Under Addons it shows Version 10.1.5.8 which is disabled (instead of Version 5.1.8.3).", "timestamp": "2017-12-17 22:36:03", "update_id": 104339, "user_id": 303, "id": 709723, "testcase_feedback": [], "user": {"name": "robatino", "email": "arobatino@gmail.com", "id": 303, "avatar": "https://seccdn.libravatar.org/avatar/bb8d454eee868b05bbdfef07cbba898ae0ea9c238d3d8001483d8c6593322eb5?s=24&d=retro", "openid": "robatino.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "qa-deltaisos"}]}}}, {"karma": 0, "comment_id": 709724, "bug_id": 1526199, "comment": {"karma": 0, "karma_critpath": 0, "text": "@robatino, no, the XUL version is installed in SeaMonkey-specific folder. Firefox will \"see\" only the WebExtension version, so this works only with FF57+.", "timestamp": "2017-12-17 22:40:11", "update_id": 104339, "user_id": 237, "id": 709724, "testcase_feedback": [], "user": {"name": "rathann", "email": "dominik@greysector.net", "id": 237, "avatar": "https://seccdn.libravatar.org/avatar/852ad2034e4d2de4eec5ee7c54530a61535edb605c2e9269cd07682a32fbdbaa?s=24&d=retro", "openid": "rathann.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "scitech_sig"}, {"name": "scitech"}, {"name": "websites-apps-cms"}, {"name": "multimedia-sig"}]}}}, {"karma": 0, "comment_id": 709887, "bug_id": 1526199, "comment": {"karma": 0, "karma_critpath": 0, "text": "@robatino I'm not doing anything different than mozilla-https-everywhere package, so either the WebExtension version is somehow compatible with FF56 or you have a local copy of the add-on in your home directory.", "timestamp": "2017-12-18 08:14:29", "update_id": 104339, "user_id": 237, "id": 709887, "testcase_feedback": [], "user": {"name": "rathann", "email": "dominik@greysector.net", "id": 237, "avatar": "https://seccdn.libravatar.org/avatar/852ad2034e4d2de4eec5ee7c54530a61535edb605c2e9269cd07682a32fbdbaa?s=24&d=retro", "openid": "rathann.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "scitech_sig"}, {"name": "scitech"}, {"name": "websites-apps-cms"}, {"name": "multimedia-sig"}]}}}, {"karma": 0, "comment_id": 709899, "bug_id": 1526199, "comment": {"karma": 0, "karma_critpath": 0, "text": "@rathann: I'm pretty sure I never installed it except as the package mozilla-https-everywhere, so it must be compatible with FF56. Addons shows Version 2017.11.21 (corresponding to the Fedora package), enabled (and not \"LEGACY\"). No big deal. I'm using mozilla-noscript-5.1.4-1.fc27.noarch.rpm for now.", "timestamp": "2017-12-18 08:27:26", "update_id": 104339, "user_id": 303, "id": 709899, "testcase_feedback": [], "user": {"name": "robatino", "email": "arobatino@gmail.com", "id": 303, "avatar": "https://seccdn.libravatar.org/avatar/bb8d454eee868b05bbdfef07cbba898ae0ea9c238d3d8001483d8c6593322eb5?s=24&d=retro", "openid": "robatino.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "qa-deltaisos"}]}}}, {"karma": 0, "comment_id": 711232, "bug_id": 1526199, "comment": {"karma": 1, "karma_critpath": 0, "text": "works for me", "timestamp": "2017-12-20 14:23:05", "update_id": 104496, "user_id": 2393, "id": 711232, "testcase_feedback": [], "user": {"name": "mastaiza", "email": "mastaizawfm@gmail.com", "id": 2393, "avatar": "https://seccdn.libravatar.org/avatar/ff005c474a9f0bdbc24950d50dc51aba554d23bb517f4c95fcf505be5334aaf2?s=24&d=retro", "openid": "mastaiza.id.fedoraproject.org", "groups": []}}}]}, {"bug_id": 1527501, "title": "mozilla-noscript-10.1.6 is available", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 711232, "bug_id": 1527501, "comment": {"karma": 1, "karma_critpath": 0, "text": "works for me", "timestamp": "2017-12-20 14:23:05", "update_id": 104496, "user_id": 2393, "id": 711232, "testcase_feedback": [], "user": {"name": "mastaiza", "email": "mastaizawfm@gmail.com", "id": 2393, "avatar": "https://seccdn.libravatar.org/avatar/ff005c474a9f0bdbc24950d50dc51aba554d23bb517f4c95fcf505be5334aaf2?s=24&d=retro", "openid": "mastaiza.id.fedoraproject.org", "groups": []}}}]}], "updateid": "FEDORA-2017-d9343fad55", "karma": 0, "content_type": "rpm", "test_cases": []}, "can_edit": false, "ci_allowed": false}