InformAction Forums

https://https://www.maskedname.com/piwik.php

https://https//www.maskedname.com/piwik.php

  var u='https://www.maskedname.com/';

  var u='//www.maskedname.com/';

What you describe is not a NoScript issue. It's a website bug.

The URL of the blocked resource is -
[code]https://https://www.maskedname.com/piwik.php[/code]
Which the browser interprets as -
[code]https://https//www.maskedname.com/piwik.php[/code]
As you can see, the domain of that URL is indeed "https".

The webmaster needs to change the second line of that code snippet, either to this...
[code] var u='https://www.maskedname.com/';[/code]
... or this -
[code] var u='//www.maskedname.com/';[/code]


(aside: NoScript 10's behavior in this situation is not what I would expect. I would think NoScript should *not* display "...https" in the popup, instead showing that entry as "https://https", because the domain "https" has no dots and is not a TLD. NoScript Classic behaves as expected.)

Hi!
during navigation to a site, my attention has been catched by a "blocked site" that was showing a domain with name "https".

Looking at the web page source I found that noscript figured the name out from an embedded script section where it found the following code:
......
function() {
var u='//https://www.maskedname.com/';
_paq.push(['setTrackerUrl', u+'piwik.php']);
......

I'd expect that noscript should only report the domain "www.maskedname.com" and not the "https" part of the string.
I'm not sure if the right domain was found or not as it also appears everywhere in the page source.

Thanks for your attention
Andrea