I tried removing anything in the templates with
.js in it, and that took care of a lot, but, I still get a "1" in NoScript and eMatrix (eMatrix is the uMatrix equivalent for UXP-derived browsers).
eMatrix gives a little bit info:
script-src 'unsafe-eval' blob: *
However, I'm not really sure what to do with this information, as I see nothing (using
Any pointers on that would be very helpful to me!
Secondly, the user list displays when someone was last on, when they joined, and their user agent, as well as IP. Admittedly less of an issue on darknets such as I2P, but it isn't great for privacy.
So, how would I go about making the user list at least "admin only" or "not public"?
Thanks in advance!
Well, depending on the particular skin there are some small JS snippets in the
.tpl files. You can grep them by the
I am not sure why you want to remove the JS from the forum. All AsmBB skins work fine with JS disabled, so the users that prefer not to execute JS, can simply disable it by NoScript or other similar tool. In the same time, the users that trust AsmBB and the forum maintainer will get some additional features like the real-time chat and post editor extras...
The user IP is displayed (of course!) only to the users with
administrator permissions. As long as the administrator of the forum always have access to the server logs and the database, displaying the IP addresses to him does not means the user privacy is affected.
For the regular users, the user activity list displays only the user/anon nick, the time and the activity. IMHO, such list is useful for the community interaction process, while is totally harmless for the user privacy.
Total removing of this feature is possible by editing the engine source files. Removing only the link from the templates is useless - anyone can enter the URL manually.