Resolved]NoScript block javascript popup on whitelisted site

[Liltwix]

So a class of mine uses a website to do work, read the book, etc (wileyplus.com). It uses javascript to display popups, which are a necessary part of the website. The website is whitelisted, yet NoScript still blocks the popups (I've allowed popups on firefox for this website). It works normally if I disable NoScript. Any idea of how I can allow the popups for this website? Thanks!

[Thrawn]

Please provide more information:
- URL where this occurs?
- Which domains are allowed (perhaps a screenshot of your NoScript menu)?
- Anything in Tools-Error Console?

[bcutter]

Having the same issue on a lot of websites!

Example: Trying to log in on:

www.feedly.com

All whitelisted, nothing blocked. But: There´s no popup!

See here:


It´s just frustrating. When disabling the NoScript-Addon, everything works fine and all my wanted popups are popping up.

The error console says:

Code: Select all

TypeError: window.open is not a function

...which it DOESN´T when NoScript is disabled.

What can I do?

[therube]

I get no indication of an available login prompt at all?
(That is in Safe Mode, so NoScript is not affecting anything in my case.)

On IE 8, the page loads entirely blank?

Tried: http://www.feedly.com/home#essentials, but that just rolls to: http://www.feedly.com/index.html#required, with no other changes?

An extension required?

[bcutter]

Feedly only runs in Firefox. And it needs an extension, right.

You see the javascript-Code in my screenshot? After that click normally a popup with the content of google authorization login should open.

As I already mentioned, feedly.com is only one example. When I check http://popuptest.com , absolutely NO popup pops up.

NoScript definitely plays a (bad) role here. Not just in my case, see thread owner or other topics.

[therube]

> Firefox

SeaMonkey?

> it needs an extension

Link?

> http://popuptest.com/

1) Allowed popuptest.com, then got a notification from SeaMonkey that it blocked popups. Allowed in SeaMonkey & 7 windows popped up.

2) gave me 3 popup windows

3) come & go, gave me 1 in & 1 out, & then the page wouldn't go back

4) timed, gave annoying timed popups

5) mouseover, 2 windows

(that's enough)

So Allow popuptest.com, then check your browser settings or other extensions for further blockages.

(Note, I did not always get the intended number of popups.)

[Giorgio Maone]

Could you check whether your problem persists if you set your noscript.surrogate.popunder.sources about:config preference to an empty string?

[bcutter]

Could you check whether your problem persists if you set your noscript.surrogate.popunder.sources about:config preference to an empty string?

GREAT - that works! You made my day dear developer

The content before deleting it from the preference was

Code: Select all

@^http://[a-z]+[^/]+\.[a-z]+(?:/|$)

I have no idea what this is used for.

Can I let it empty without any impact of NoScript´s features & functions?

[therube]

(While I understand one can change a pref, mine is different, & looks to be set to default?

Code: Select all

@^http:\/\/[\w\-\.]+\.[a-z]+ wyciwyg:

Suppose if it were changed at some point, if the default changed sometime later, it would retain the mod'd value instead of updating to the most recent default.)

[Thrawn]

I have no idea what this is used for.

Can I let it empty without any impact of NoScript´s features & functions?

It catches popup windows that appear behind the current window when you click on something. Traditional popup blocking doesn't catch them because they appear in response to user input, and users don't immediately catch them because they're behind the visible window.

[bcutter]

After updating the NoScript-Addon to version 2.5.4, the problem was back again (the "noscript.surrogate.popunder.sources" had again "@^http://[a-z]+[^/]+\.[a-z]+(?:/|$)").

So do I now need to empty this setting everytime the addon is updated? This is not a solution!

[bitcores]

I have been having this problem for a while now without realizing that it was noscript causing it (running Firefox Nightly so I expect things to break at times)

I have tried the noscript.surrogate.popunder.sources suggestion above, I have tried clearing the noscript.surrogate.popunder.replacement option too but nothing seems to stop noscript from blocking javascript window creation except disabling noscript. Currently running 2.5.4r3.

At http://popuptest.com/goodpopups.html only the second link works for me. There are no notifications of blocked scripts when I click the other links, neither are there any notifications on the other test pages, except from Nightly when it blocks the ones it is able to on its own.

The most annoying aspect of this is that my Bank uses javascript window creation to launch its Internet Banking login and I just can't launch it with noscript running.

[sp3000]

What bitcores said. Another data point and additional info:
Nightly 18.0a1 (2012-09-09), NoScript 2.5.4rc3, on osx.6.8
http://www.popuptest.com/goodpopups.html only #2 works; #1, #3, #4 do nothing useful. No info banners or error messages in web/error consoles. A blank item appears in the window menu for each failed popup attempt. Iff a failed popup attempt happened, quitting the browser with cmd-q hangs. Blanking noscript.surrogate.popunder.sources has no effect on this.

[timbugzilla]

I'm getting this, and am seeing surrogate script ghost windows in about:memory. With these I have to kill the firefox.exe process manually in a task manager. This is with the nightly mozilla-central win32 builds.

I tried reverting to noscript 2.5.2 but that changed nothing. Interestingly I could not disable surrogates. I suspect that nightly FF may be to blame.

Someone has filed a related bug here:

https://bugzilla.mozilla.org/show_bug.cgi?id=789773

[therube]

Count me in.

Chase Credit Cards, https://chaseonline.chase.com/Logon.aspx.
Logged in & the page to check your statement opens to something like, https://stmts.chase.com/stmtslist?AI=3250.

Uses a JavaScript link to open the statement (PDF as it is) in a popup window.
Something like:

Code: Select all

javascript:bolPopupURLClose('/stmt/StatementContainer?AccountId=3250&OptionId=-62190&EligibleForPaperless=True&Hash=509779');

If chase.com is allowed, nothing happens.
If chase.com is not allowed, the statement will open (in the current window).

This is in the current Aurora.
Release works.