Avatar for Username

搜尋 Mozilla 技術支援網站

防止技術支援詐騙。我們絕對不會要求您撥打電話或發送簡訊，或是提供個人資訊。請用「回報濫用」功能回報可疑的行為。

了解更多

此討論串已被封存。 如果您有需要幫助，請新增一個新問題

Is there a way to disable plugins globally, but enable them on a per-site basis?

S.A
S.A
more options

Is there a way in Firefox to globally disable plugins and allow only certain sites to run them (i.e., a whitelist)? I've tried working with CAPS, but it doesn't seem to be able to turn off <embed> or <object> tags, only certain aspects of JavaScript. I know about FlashBlock, but I've heard it's easy to circumvent and isn't meant for security. NoScript has this ability, and it's great for my own PC, but I'm looking for something more simple that I can use on the PCs of my friends and relatives.

Is there a way in Firefox to globally disable plugins and allow only certain sites to run them (i.e., a whitelist)? I've tried working with CAPS, but it doesn't seem to be able to turn off <embed> or <object> tags, only certain aspects of JavaScript. I know about FlashBlock, but I've heard it's easy to circumvent and isn't meant for security. NoScript has this ability, and it's great for my own PC, but I'm looking for something more simple that I can use on the PCs of my friends and relatives.

所有回覆 (1)

the-edmeister
the-edmeister
  • Moderator
more options

No, not in the basic Firefox build, and I haven't seen an extension with those features that is simple enough for the "average user" to use.

Flashblock only blocks Flash, Shockwave, and Authorware. Plugins like Java, Silverlight, and other aren't blocked by Flashblock. There is one manual control extension for JavaScript, Java, Flash, and Silverlight - Quick Java - https://addons.mozilla.org/en-US/firefox/addon/1237/ - but there is no "whitelist", only toolbar /statusbar buttons to toggle those plugins on/off.

As you mentioned, NoScript has features to block specific plugins from running automatically, and also has a "whitelist" so those plugins will run automatically on "trusted" websites, but getting the NoScript "whitelist" set up is a continuing job. It can be a frustrating extension to use for even "above-average users".

I use NoScript on my Windows desktop PC's as it is intended to be used - allowing JavaScript per domain / website by "allowing" or "temporarily allowing", but on my Linux netbook (900MHz processor and only 1GB of RAM) I have it set to Allow Scripts Globally, so I don't have to allow JavaScript for each domain on every website I visit. When I first got that netbook I ran for a few months without blocking anything, but after Firefox getting stalled by too many unnecessary plugin presentations I installed Flashblock. After a few weeks I realized that Flashblock wasn't blocking enough of the plugins that were causing problems, so I switched to NoScript with Allow Scripts Globally selected. IMO, Linux is much less of a target than Windows PC's are as far as exploits and Malware are concerned.