Verizon Wireless with 1.10

[rdmeer]

Hi,

I cannot view the login bar at the top of the Verizon Wireless Web site with NoScript enabled. The bar shows if I disable the NoScript add-on. But it does not show even if I allow scripts globally. I'm not sure which setting is affecting the bar.

How can I get the login bar to show with NoScript enabled?


Thanks,
Mike

[Alan Baxter]

Confirmed with NoScript 2.0rc6, even with Scripts Globally Allowed. NoScript is blocking XSS, but giving no notification. The message in the Error Console is

Code: Select all

[NoScript] Blocking cross site Javascript served from https://scache.vzw.com/globalnav/globalnavmenu.txt with wrong type info text/plain and included by http://www.verizonwireless.com/b2c/index.html

The problem and Error Console message persist even if I disable XSS by unchecking both boxes in NoScript Options > Advanced > XSS

I don't know how to work around this problem without disabling NoScript. Sorry, MIke.

[al_9x]

How can I get the login bar to show with NoScript enabled?

noscript.inclusionTypeChecking.exceptions=.vzw.com

[rdmeer]

That worked. Thank you al_9x.

For completeness, to make the change:

• Type "about:config" in the address bar.
• Press Enter.
• Click "I'll be careful, I promise!"
• Paste "noscript.inclusionTypeChecking.exceptions" in the Filter field.
• Double-click on the key.
• Paste ".vzw.com" into the prompt.
• Click OK.
• Open a new tab.
• Browse to the Verizon Wireless Web site.

The login bar should show. If not then make sure you pasted the correct value into the exceptions key: ".vzw.com" (dot vzw dot com).

[Alan Baxter]

I've confirmed your fix too, al_9x. Thank you.

[therube]

Man I hate Verizon !

(NoScript 2.0)

Appears I can log into a personal account without the noscript.inclusionTypeChecking.exceptions;.vzw.com change.

Though I can't seem to get to a usable area on the business end, only ending up at a "no javascript" (I suppose it is) page, https://ebillpay.verizonwireless.com/vzw/nos/sorry.jsp. Even so, I think I'm logged in. And then I can't seem to log out (without clearing cookies or authenticated sessions)?


(What is an "authenticated sessions"? As in like after clearing it, why wasn't I logged out from here, informaction.com, which I expected to be?)

[therube]

Man I hate Verizon !

Appears that SeaMonkey & FF (3.6.7) work differently at Verizon.
FF needing the noscript.inclusionTypeChecking.exceptions change.

(Running NoScript 1.9.9.53 in FF.)

I can successfully log in to VZ business & actually load a page of interest, https://b2b.verizonwireless.com/tbmb/login/perform.do, rather then the stupid "nojs" page.

Yet when I spoofed the UA in SeaMonkey, I still was running into problems?

verizonwireless.com & vzw.com Allowed in each instance.

Looks like includsionTypeChecking is only needed on a page like, http://www.verizonwireless.com/b2c/index.html.
But not here, https://mblogin.verizonwireless.com/ams ... perform.do.

And I can actually log in & get to where I need to go using the latter link in SeaMonkey .


Man I hate Verizon !

[therube]

With 2.0.1rc1, I now need to add .vzw.com as a noscript.inclusionTypeChecking.exceptions & further I can now log in & navigate successfully. Appears I was running into meta redirections being broken sometimes.


And before you get any ideas, Man I <still> hate Verizon !


*noscript.inclusionTypeChecking.exceptions, I never would have figured that out.

[bob]

Updating NoScript removes this fix. Bookmark this page and apply the same fix again whenever you update NoScript.

[therube]

> Updating NoScript removes this fix

It should not have?

[Giorgio Maone]

> Updating NoScript removes this fix

It should not have?

No it shouldn't. Updates shouldn't touch non-default preference values. Something else seems to be broken in bob's profile.