nosniff is blocking a script without telling me

Bug reports and enhancement requests

nosniff is blocking a script without telling me

Postby foresto » Fri Feb 03, 2012 8:24 pm

I was trying to see the javascript effect in the Demo section of this page:

http://polarblau.github.com/stickySecti ... ticky-list

...and it didn't work. I had allowed scripts on the site using the NoScript icon, and the icon didn't indicate that anything else was being blocked, so I believed the demo must be broken.

It turned out that NoScript was secretly blocking a script after all. The javascript console showed this message:

[NoScript] Blocking nosniff Javascript served from https://raw.github.com/polarblau/sticky ... headers.js with wrong type info text/plain, inline and included by http://polarblau.github.com/stickySectionHeaders/

WTF? I can't think of any reason why NoScript should block scripts without indicating that it is doing so. It just leads to frustration.

The same problem occurs when I tell NoScript to allow scripts globally, which would seem to be a problem as well.
Mozilla/5.0 (Ubuntu; X11; Linux i686; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
foresto
 
Posts: 1
Joined: Fri Feb 03, 2012 8:12 pm

Re: nosniff is blocking a script without telling me

Postby therube » Fri Feb 03, 2012 8:54 pm

Link was broken.
Suppose this is it, http://polarblau.github.com/stickySectionHeaders/?

Code: Select all
[NoScript] Blocking nosniff Javascript served from https://raw.github.com/polarblau/stickySectionHeaders/master/src/jquery.stickysectionheaders.js with wrong type info text/plain, inline and included by http://polarblau.github.com/stickySectionHeaders/


I agree, I think.
Somehow we should be notified without needing to open Error Console.

Perhaps the NoScript icon could go black or something like that, a visual indicator. (And then a context-menu option to view Error Console.)
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 5.1; rv:12.0a2) Gecko/20120202 Firefox/12.0a2 SeaMonkey/2.9a2
User avatar
therube
Ambassador
 
Posts: 4900
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: nosniff is blocking a script without telling me

Postby Giorgio Maone » Fri Feb 03, 2012 10:30 pm

Not sure it's worth the effort: careless developers like that will soon be forced adapt, since IE9 doesn't give any visual clue either of this (correct) blocking:
IE9 wrote:SEC7112: Script at https://raw.github.com/polarblau/sticky ... headers.js blocked because of a MIME type mismatch

(from IE9's console, deep buried inside IE9's developer tools)
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:10.0) Gecko/20100101 Firefox/10.0
User avatar
Giorgio Maone
Site Admin
 
Posts: 7322
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy

Re: nosniff is blocking a script without telling me

Postby therube » Sat Feb 04, 2012 12:02 am

(It's a shame F12, developers tools, wasn't included long long ago in IE. Who knows, may have actually even looked at IE had it been there. Quite odd that they include it now. Looks like there's some interesting stuff there. Maybe one day I'll take a look.)
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:12.0a2) Gecko/20120202 Firefox/12.0a2 SeaMonkey/2.9a2
User avatar
therube
Ambassador
 
Posts: 4900
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA


Return to NoScript Development

Who is online

Users browsing this forum: Google [Bot] and 1 guest