I am using K-meleon 1.1.3.
Any possibility that the noscript plugin from jujuland
will be updated to use (the latest) NoScript (1.3.1).
Many thanks in advance,

soccerfan

I would VERY much like an answer as to how NoScript can be made to run within K-meleon. I am extremely concerned about the threat of cross-scripting (XSS), & NoScript provides good protection against that.

An answer will be greatly appreciated.

Regards,
bellgamin

Newer NoScript contained some XUL incompatible to K-Meleon.
You could try hide these elements and set their prefs so that do not disturb k-m.


IMHO old version available @ jujuland extension page is sufficiant for K-Meleon's protection.



Edited 1 time(s). Last edit at 03/23/2008 07:03AM by guenter.

Thanks guenter. Do you have link to "jujuland extension page"?

Here : http://pagesperso-orange.fr/jujuland46/JujuLand/KMES/KMES-Download.html

Fred

Thanks Fred. I downloaded Noscript but I have no idea as to how to make it work.

I have used K-mel as my default for several years, but I am discouraged by the obscure instructions for using extensions. All I had to do was click one button in order for Noscript to work with Firefox. On the other hand, K-mel just lets Noscript sit there, & offers no clue as to what to do next.

Without Noscript (or similar protection) K-mel is very much at risk for cross-scripting exploits.

Is K-mel becoming too much a browser for "elitists" only? I am very discouraged.

HOW do I get Noscript to function within K-mel? If anyone decides to answer this, please remember -- I am not by any means a computer expert.

@ bellgamin:
NO instructions needed, download this installation file: http://perso.orange.fr/jujuland46/JujuLand/KMES/K-Ext110_NoScript.exe

Run to install it.

K-Meleon in Spanish

K-Ext110_NoScript.exe is the installer, download it, when You start it it will find the last K-Meleon install - there it installs and it creates an icon on which You can right click for menu - and the same menun is found in Tools.

The problem are above all not attacks by Cross-site scripting,
but by CSRF (Cross-site request forgery).
But this seems less dangerous since the update of Firefox
to 2.0.0.10 and respectively Seamonkey and K-Meleon with
Gecko 1.8.1.10 already. Look here :

http://www.mozilla.org/security/announce/2007/mfsa2007-39.html

CSRF can also even be done by images. More info here :

http://en.wikipedia.org/wiki/CSRF

Regards

Fred

Thanks to all, esp. to desga2 & guenter for putting me onto K-Ext110_NoScript.exe.

It works! I now have NoScript working with K-mel.

However, that version is sorely outdated. The latest version (which runs with Firefox) is much improved versus the oldie installed with K-mel.

XSS is a very serious threat, and other browser exploits of similar mein have spawned, as mentioned by Fred. Even security forums are being hit, such as Avast Antivirus's forum.

I do hope that someone will develop an installer whereby K-mel users can easily install the LATEST version of NoScript. It would be a real service, and would greatly add to K-mel's security.

Warm regards,
Bellgamin

Quote
bellgamin
I do hope that someone will develop an installer whereby K-mel users can easily install the LATEST version of NoScript. It would be a real service, and would greatly add to K-mel's security.Bellgamin

My feelings exactly!
I do hope Alain (jujuland) can (please) spare some time to get the latest noscript packaged as an extension for kmeleon (1.1.x).
This single addition (with adblock plus already present) would undoubtedly rank kmeleon among the most secure browsers.

soccerfan

Bump!

I still am hoping that someone will make it possible to use NoScript on K-mel.

To be specific, is there someone who can make it possible to easily install file extension .xpi into K-mel?

(.xpi is the file extension used by extensions for Firefox).

@Bellgamin,

Don't dream, xpi won't works on K-Meleon, because they won't install some particular files (kmm for example), and installs some files unneeded and sometimes at wrong place, or yet some files which need to be modified.

It's not by pure egocentrism that I have made K-Meleon Extensions.

For updating the last Noscript version, I first have no time now, but I'm not the only which can do that, and sources are on my web page.

A+

---

Mozilla/5.0 (x11; U; Linux x86_64; fr-FR; rv:38.0) Gecko/20100101 Ubuntu/12.04 K-Meleon/76.0

---

Web: http://jujuland.pagesperso-orange.fr/
Mail : alain [dot] aupeix [at] wanadoo [dot] fr

---

Ubuntu 12.04 - Gramps 3.4.9 - Harbour 3.2.0 - Hwgui 2.20-3 - K-Meleon 76.0 rc

---

NO problem, I'm working on it.

K-Meleon in Spanish

@desga2-- I am verrrry thankful that you have undertaken this vital project!

Quote
bellgamin
@desga2-- I am verrrry thankful that you have undertaken this vital project!

My feelings exactly!

hi bellgamin,
Mainly for security our Devs have chosen not to use the easy to implement SeaMonkey xpi service. alain's adapted nsi installer service simply gave superior security.

kko changed an xpi installer.js as proof of concept - it would work if k-Meleon had been given the infra structure to use it. I have seen and tested working xpi installers.

This xpi service will not install Firefox extensions naturally - because these extensions make a browser version check. The makers of the extensions write into the installer script what applications are supported. And this was the other main reason - we would not have gained access to Firefox extensions. Plus users would have complained against K-Meleon and our devs while the reason was in in the extensions service and the makers of the extensions.

The few extension creators that wanted to support K-Meleon have done so without xpi. My thanks go to these few.



p. s. Firefox's safer xpi service (loosely translated: extension installer service // cf. wikipedia: Cross-Platform Install) is supported neither by SeaMonkey nor K-Meleon at the moment.

The "not supported and used" may change when SeaMonkey and K-Meleon use GRE 1.9 especially its toolkit.

K-Meleon NoScript Extension updated is now available:

- Changelog:
NosScript updated to last version 1.6.5.
Fix uncompatible code.
Extension Setup updated.
Setup and macro menu translated to: de-DE, en-US, es-ES, fr-FR
Minors optimizations.

Special thanks to Giorgio Maone for his help to replace uncompatible code with K-Meleon and created original Firefox NoScript add-on.

Thanks to: old version (1.1.4.5) adapted by Fred, CaptnBlack & Alain Aupeix.

And thanks to Guenter and Alain for translations.

*** EDITED *** Date: 2008/05/14
Some fixed errors, please download again.
Changelog:
- Fixed some macro errors.
- Added NoScript defaults preferences file.

K-Meleon NoScript Extension 1.6.5

IMPORTANT NOTE:
This extension is untested (i haven't time ), use it under your own risk.
Recommendations to not lost data:

1) Created a new folder named "KMtest" (for example) and copy here all your K-Meleon folder content.

2) Check that you have in this test KM folder a "profile.ini" file.

3) Install this NoScript Extension in KM test folder created.

4) Test it in this test installation.

5) If you found problems, bugs, errors, please report it here (in current thread of K-Meleon forum).

Thanks.

K-Meleon in Spanish



Edited 3 time(s). Last edit at 05/14/2008 11:40AM by desga2.

Quote
desga2
K-Meleon NoScript Extension updated is now available:...
.....
5) If you found problems, bugs, errors, please report it here (in current thread of K-Meleon forum).
Thanks.

First of all: Many thanks desga2 for this update. No problem installing (in Pocket k-meleon 1.1.3).

But I have a little problem...
When I right-click the noscript icon and click on options to bring up the options panel,
there are three buttons at the bottom of the options panel: "reset", "ok" and "cancel".

Problem: Clicking on the "ok" button (to save preferences) does nothing; does not respond.
(The other two buttons work fine.)
I wonder if anyone else can reproduce this problem or is it just me?

soccerfan

If you are reffering to window not close after push over "OK" button, this isn't a bug or error, this is thus in original code an original NoScript version (Firefox).
OK button save configuration changes but not close window or showed any dialog.

If you changed some options click on "OK", push close cross in up-right square or "Cancel" button to close window and after you open Options again and all changes were saved, "OK" button are working fine.

K-Meleon in Spanish

Another possible bug: The 'activate noscript' line in the right-click menu cannot be unchecked
(I also tried to uncheck it through the k-meleon tools menu for noscript but failed).
Any confirmation appreciated.

soccerfan

Quote
desga2
If you are reffering to window not close after push over "OK" button, this isn't a bug or error, this is thus in original code an original NoScript version (Firefox).
OK button save configuration changes but not close window or showed any dialog.

Yes this is what I was referring to. Glad to know it is not a problem. Thanks for checking!

soccerfan

Quote
soccerfan
Another possible bug: The 'activate noscript' line in the right-click menu cannot be unchecked
(I also tried to uncheck it through the k-meleon tools menu for noscript but failed).
Any confirmation appreciated.

soccerfan

Works to me in 1.1.5 but not in 1.5 Beta.
I'm checking macro file because i found some errors.

Wait a little, i'll updated extension again when it fixed.

Quote
desga2
Wait a little, i'll updated extension again when it fixed.

WOW, thanks for the fast response!!! I look forward to the updated file.

soccerfan

I have upload NoScript Extension again. View Edited Note in download post.
Now everything should work fine.

K-Meleon in Spanish



Edited 1 time(s). Last edit at 05/14/2008 11:45AM by desga2.

Quote
desga2
I have upload NoScript Extension again. View Edited Note in download post.
Now everything should work fine.

And it does work fine (for my KM1.1.3)! Thank you desga2 for your tireless efforts.

The k-meleon team here is really helpful. And thanks to them,
ever since I found the lean/mean k-meleon last year, I have used nothing else.

soccerfan

Quote
I have upload NoScript Extension again. View Edited Note in download post.

Where do I find this NoScript Extension in Edited Note in download post?

Thx,

Mala Okeh

Hi Mala,
I'm reffering to this post before.
Link to download is right side to NoScript image.
(Edited note is the Changelog above NoScript image)

K-Meleon in Spanish

Many many thanks to desga2 & (for his cooperation) to Giorgio Maone.

Aloha in the Messiah,
W.P.T. (Bill) Bellgamin
http://www.biblebell.org/
http://www.alohabible.net/
Jeremiah 9.23-24 ><)))°>

Quote
desga2
K-Meleon NoScript Extension updated is now available:

- Changelog:
NosScript updated to last version 1.6.5.

this is no longer the latest version. Latest NoScript version offered at their web site is now 1.6.8.
looks like the NoScript Plugin for KM needs to be updated again.



Edited 2 time(s). Last edit at 06/02/2008 04:02PM by noel-pg2.