Consider wss: in secure protocol checks (thanks barbaz for reporting).

hackademix · hackademix · commit 45a7e2f99127 · 2026-04-09T20:29:21.000+02:00
diff --git a/src/nscl b/src/nscl
@@ -1 +1 @@
-Subproject commit 9c9b02739678b7aab8d0c87f62ab2cc08235779c
+Subproject commit 274d984471b2bb2f2570bb211a32cd496dca3a0d
diff --git a/src/ui/popup.js b/src/ui/popup.js
@@ -1,7 +1,7 @@
 /*
  * NoScript - a Firefox extension for whitelist driven safe JavaScript execution
  *
- * Copyright (C) 2005-2024 Giorgio Maone <https://maone.net>
+ * Copyright (C) 2005-2026 Giorgio Maone <https://maone.net>
  *
  * SPDX-License-Identifier: GPL-3.0-or-later
  *
@@ -445,7 +445,7 @@ addEventListener("unload", e => {
         } else {
           let domain = tld.getDomain(url.hostname);
           if (domain) {
-            domain = url.protocol === "https:" ? Sites.secureDomainKey(domain) : domain;
+            domain = Sites.isSecureProtocol(url.protocol) ? Sites.secureDomainKey(domain) : domain;
           } else {
             domain = url.protocol;
           }

Original file line number	Diff line number	Diff line change
`@@ -1,7 +1,7 @@`
`1`	`1`	`/*`
`2`	`2`	`* NoScript - a Firefox extension for whitelist driven safe JavaScript execution`
`3`	`3`	`*`
`4`		`- * Copyright (C) 2005-2024 Giorgio Maone <https://maone.net>`
	`4`	`+ * Copyright (C) 2005-2026 Giorgio Maone <https://maone.net>`
`5`	`5`	`*`
`6`	`6`	`* SPDX-License-Identifier: GPL-3.0-or-later`
`7`	`7`	`*`
`@@ -445,7 +445,7 @@ addEventListener("unload", e => {`
`445`	`445`	`} else {`
`446`	`446`	`let domain = tld.getDomain(url.hostname);`
`447`	`447`	`if (domain) {`
`448`		`- domain = url.protocol === "https:" ? Sites.secureDomainKey(domain) : domain;`
	`448`	`+ domain = Sites.isSecureProtocol(url.protocol) ? Sites.secureDomainKey(domain) : domain;`
`449`	`449`	`} else {`
`450`	`450`	`domain = url.protocol;`
`451`	`451`	`}`