To this day the prefsheet in F2 > Page Display offers only this:
x Enable frames
(toggles pref: "browser.frames.enabled", not sure if that one even still works??)

But considering the omnipresent facebook/twitter/etc. iframes in almost all pages nowadays, tracking every step we do, IMO this is a quite important newer pref, missing since many years in the GUI:

permissions.default.subdocument

In my macro permdefs have noted this:
"Toggle loading subdocuments (iframes, frames, embedded objects)"

That pref has a triple setting:
1 = allow all
2 = block all
3 = block 3rd party
But guess we probably only care about blocking 3rd party = toggle 1/3? Just to keep the GUI simpler, because that iframes toggle would also be helpful in menu Tools > Privacy, and as button in the Privacy Toolbar.

Of course (sigh), the usual prob is, if the F2-prefsheets are updated, all language locales must be updated too. The usual killer prob for almost all new gecko features added since KM1.5. But isn't that necessary for Goanna anyway? Thinking of the missing "visited cookies" a few days ago:
http://kmeleonbrowser.org/forum/read.php?20,144350

The tiniest improvement option would be really easy:
When user toggles "Frames", the GUI and menus can stay as they always were, but the macro simply toggles BOTH prefs? The old "browser.frames.enabled" and simultaneously "permissions.default.subdocument" between 3rd-party On/Off?

[_check_]



Edited 1 time(s). Last edit at 01/14/2018 07:42PM by siria.

In about:config even none of those important default permissions exists yet:

permissions.default.subdocument (see above)
permissions.default.script
permissions.default.stylesheet
permissions.default.media
permissions.default.object
permissions.default.refresh

Please add, at least to the *.js

Of course would all make good additions for the GUI too, but am afraid way too much work for now Especially "script" is a nightmare, with other script prefs interfering too, yikes.

But at least those prefs should show up in about:config, for advanced users to discover.

"permissions.default.media"
This blog has an entry from 2014, that says this pref can block HTML5??
Down at the bottom.
http://archive.rebeccablacktech.com/g/thread/40913139

Does that work...?
Would be so simple. If yes, would be most important for the GUI too, but this media-pref would really need all 3 options (all/none/no 3rd-party)

Edit: rodocop tested it already:
http://kmeleonbrowser.org/forum/read.php?1,134935,135333#msg-135333



Edited 2 time(s). Last edit at 12/31/2017 12:11AM by siria.

siria

Quote

(toggles pref: "browser.frames.enabled", not sure if that one even still works??)

At one time, Dorian said: "This pref was removed".
( http://kmeleonbrowser.org/forum/read.php?8,135856,136436#msg-136436 )

But since then I found a very powerful tool and made the switch. It is sufficient to use the rule for built-in adblock $subdocument or $subdocument,third-party. To enable or disable it using kmeleon.plugins.adblock.disabled.
Then make a macro, add in menu (and system is not overloaded, no unwanted adblock rules).
Of course, you can write and exceptions to rules.

Other interesting global filters:
$other
$popup
$image
$script
$object
$stylesheet
$xmlhttprequest
$object-subrequest

Sometimes, you can use adblock (including built-in) to compensate lost functionality.



Edited 6 time(s). Last edit at 12/31/2017 01:10AM by hermes.

Quote
hermes
Other interesting global filters:
$other
$popup
$image
$script
$object
$stylesheet
$xmlhttprequest
$object-subrequest

Some of those I've mentioned above already, others look familiar from addon ExExceptions.
And all above are "permissions.default.xxx"?
Just what do the green ones do??
Keep in mind I have no 'deep stuff' background like you, only simple macros ;-)

Edit:
meanwhile realized xmlhttprequest (XHR) is extreme, it extends javascript with extra dangerous remote features, most AJAX needs js+XHR permission for working.



Edited 1 time(s). Last edit at 06/16/2018 03:16PM by siria.

https://adblockplus.org/en/filters here all details.
Everything written is true for built-in adblock, with exception of rules for hiding items.

xmlhttprequest — requests started using the XMLHttpRequest object or fetch() API
object-subrequest — requests started by plugins like Flash
other — types of requests not covered in the list above.



Edited 1 time(s). Last edit at 12/31/2017 01:28AM by hermes.