Firefox freezes when loading most pages on The Guardian

Post a reply

Smilies
:D :) ;) :( :o :shock: :? 8-) :lol: :x :P :oops: :cry: :evil: :twisted: :roll: :!: :?: :idea: :arrow: :| :mrgreen: :geek: :ugeek:

BBCode is ON
[img] is ON
[url] is ON
Smilies are ON

Topic review
   

Expand view Topic review: Firefox freezes when loading most pages on The Guardian

Re: Firefox freezes when loading most pages on The Guardian

by barbaz » Tue Oct 03, 2017 4:40 pm

vmac wrote:Sorry, I'm a normal user of noscript. Therefore I can't understand your comments.
Sorry, should have made clear that the part about console messages wasn't directed at you.

If you haven't already Mark facebook.net as Untrusted, please try that and let us know if the problem persists.

Re: Firefox freezes when loading most pages on The Guardian

by vmac » Tue Oct 03, 2017 4:35 pm

Sorry, I'm a normal user of noscript. Therefore I can't understand your comments. I see that the website above will block my Firefox tab and the CPU usage is very high.

Re: Firefox freezes when loading most pages on The Guardian

by barbaz » Tue Oct 03, 2017 4:25 pm

vmac wrote:Here we are again - but with a new website: http://www.saturn.de/
CPU is high, FF is blocked
Not seeing that here. I tested in a clean profile with NoScript 5.1.2rc1 & Scripts Globally Allowed, and I only get a very brief lag.

What happens if you Mark facebook.net as Untrusted?

One other thing. The console messages showed NoScript XSS filter active, but there were no Injection Checker messages or similar specifying what exactly was detected as a XSS attempt.

Code: Select all

[NoScript XSS] Sanitized suspicious request. Original URL [https://6810627.fls.doubleclick.net/activityi;src=6810627;type=homep0;cat=samsu0;u1=DESKTOP;u3=;u4=SAMSUNG%7CSAMSUNG%7CAPPLE%7CSAMSUNG%7CSONY%7CLENOVO%7CK%C3%84FER%7CSAMSUNG;u5=SAMSUNG%20Galaxy%20S8%2C%20Smartphone%2C%2064%20GB%2C%205.8%20Zoll%2C%20Midnight%20Black%2C%20LTE%7CSAMSUNG%20Galaxy%20S8%2C%20Smartphone%2C%2064%20GB%2C%205.8%20Zoll%2C%20Arctic%20Silver%2C%20LTE%7CAPPLE%20iPhone%206%2C%20Smartphone%2C%2032%20GB%2C%204.7%20Zoll%2C%20Spacegrau%2C%20LTE%7CSAMSUNG%20Galaxy%20S8%2C%20Smartphone%2C%2064%20GB%2C%205.8%20Zoll%2C%20Orchid%20Grey%2C%20LTE%7CSONY%20PlayStation%204%201%20TB%20Schwarz%20%2B%20FIFA%2018%20%2B%202.%20DualShock4%20Controller%20%2B%20PS%20Plus%2014%20Tage%7CLENOVO%20C2%2C%20Smartphone%2C%208%20GB%2C%205.0%20Zoll%2C%20Schwarz%2C%20LTE%7CK%C3%84FER%20305016%20Caffe%20Espresso%2C%20Kaffeebohnen%7CSAMSUNG%20Galaxy%20J3%20(2017)%20Duos%2C%20Smartphone%2C%2016%20GB%2C%205%20Zoll%2C%20Schwarz%2C%20LTE;u6=2246306%7C2246307%7C2249741%7C2246308%7C2324918%7C2180274%7C1358723%7C2292599;u7=Handy%20%26%20Smartphone%20ohne%20Vertrag%7CHandy%20%26%20Smartphone%20ohne%20Vertrag%7CHandy%20%26%20Smartphone%20ohne%20Vertrag%7CHandy%20%26%20Smartphone%20ohne%20Vertrag%7CPlayStation%204%7CHandy%20%26%20Smartphone%20ohne%20Vertrag%7CKaffee%20%2B%20Tee%7CHandy%20%26%20Smartphone%20ohne%20Vertrag;u8=Smartphones%7CSmartphones%7CSmartphones%7CSmartphones%7CPS4%20Konsolen%7CSmartphones%7CKaffee%7CSmartphones;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=2110374163718.9888?] requested from [http://www.saturn.de/]. Sanitized URL: [https://6810627.fls.doubleclick.net/#3667527244672981962].
[NoScript XSS] Sanitized suspicious request. Original URL [https://6810627.fls.doubleclick.net/activityi;src=6810627;type=homep0;cat=samsu0;u1=DESKTOP;u3=;u4=SAMSUNG%7CSAMSUNG%7CAPPLE%7CSAMSUNG%7CSONY%7CLENOVO%7CK%C3%84FER%7CSAMSUNG;u5=SAMSUNG%20Galaxy%20S8%2C%20Smartphone%2C%2064%20GB%2C%205.8%20Zoll%2C%20Midnight%20Black%2C%20LTE%7CSAMSUNG%20Galaxy%20S8%2C%20Smartphone%2C%2064%20GB%2C%205.8%20Zoll%2C%20Arctic%20Silver%2C%20LTE%7CAPPLE%20iPhone%206%2C%20Smartphone%2C%2032%20GB%2C%204.7%20Zoll%2C%20Spacegrau%2C%20LTE%7CSAMSUNG%20Galaxy%20S8%2C%20Smartphone%2C%2064%20GB%2C%205.8%20Zoll%2C%20Orchid%20Grey%2C%20LTE%7CSONY%20PlayStation%204%201%20TB%20Schwarz%20%2B%20FIFA%2018%20%2B%202.%20DualShock4%20Controller%20%2B%20PS%20Plus%2014%20Tage%7CLENOVO%20C2%2C%20Smartphone%2C%208%20GB%2C%205.0%20Zoll%2C%20Schwarz%2C%20LTE%7CK%C3%84FER%20305016%20Caffe%20Espresso%2C%20Kaffeebohnen%7CSAMSUNG%20Galaxy%20J3%20(2017)%20Duos%2C%20Smartphone%2C%2016%20GB%2C%205%20Zoll%2C%20Schwarz%2C%20LTE;u6=2246306%7C2246307%7C2249741%7C2246308%7C2324918%7C2180274%7C1358723%7C2292599;u7=Handy%20%26%20Smartphone%20ohne%20Vertrag%7CHandy%20%26%20Smartphone%20ohne%20Vertrag%7CHandy%20%26%20Smartphone%20ohne%20Vertrag%7CHandy%20%26%20Smartphone%20ohne%20Vertrag%7CPlayStation%204%7CHandy%20%26%20Smartphone%20ohne%20Vertrag%7CKaffee%20%2B%20Tee%7CHandy%20%26%20Smartphone%20ohne%20Vertrag;u8=Smartphones%7CSmartphones%7CSmartphones%7CSmartphones%7CPS4%20Konsolen%7CSmartphones%7CKaffee%7CSmartphones;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=2110374163718.9888?] requested from [http://www.saturn.de/]. Sanitized URL: [https://6810627.fls.doubleclick.net/#6912567420447104334].
Is that expected behavior?

Re: Firefox freezes when loading

by vmac » Tue Oct 03, 2017 4:02 pm

Here we are again - but with a new website: http://www.saturn.de/
CPU is high, FF is blocked

Re: Firefox freezes when loading most pages on The Guardian

by ginahoy » Fri Sep 22, 2017 6:09 am

Excellent! Finally I can visit tripadvisor without first unloading NS! I see from the other thread I could have accomplished the same by temporarily disabling XSS. If this is eventually resolved in a new version, please post an update here so those following this thread can remove XSS exceptions.

BTW, I had to add the Deny INC tweak (as per your July 12 post) to avoid the XSS garbage on eBay and other sites.

Thank you.

Re: Firefox freezes when loading most pages on The Guardian

by barbaz » Fri Sep 22, 2017 1:02 am

Re: Firefox freezes when loading most pages on The Guardian

by ginahoy » Thu Sep 21, 2017 9:59 pm

Although I may circle back to the XSS warnings (re: the last several posts), I wanted to update this thread on the original topic.

As noted in previous comments, the June 30 development release and ABE/XSS tweaks suggested by Barbaz seemed to improve performance on sites like tripadvisor. I attributed any further freeze-ups to my computer, which is getting rather long in the tooth (circa 2008 machine running XP).

I recently built a new Linux machine (7700K CPU with 32GB RAM, FF v54) and to my utter shock and amazement, tripadvisor is locking up FF on that machine! Pages load in what I would call 'fits and starts'. It takes about two minutes to finish loading a page with hotel listings for a random city. During that time, I'm only able to gain focus for intervals of a split second between long periods where the browser is frozen. Interestingly, the CPU is not active during those intervals so this is clearly not a resource issue. Once I disable NS, the same page always loads super fast.

Below is the readout from NS's flyout. My initial thought was that one of the blocked sites could be causing an active script to time out, with multiple retries. However, I tried temporarily allowing all seven blocked sites, and lock-up behavior was the same!

Code: Select all

+tripadvisor.com
+bing.com
+facebook.net
+pinimg.com
+tacdn.com
+googletagservices.com
!tamgrt.com
!googleadservices.com
!criteo.net
!doubleclick.net
!scorecardresearch.com
!mathtag.com
!smartertravel.com

Re: Firefox freezes when loading most pages on The Guardian

by barbaz » Thu Aug 03, 2017 8:25 pm

ginahoy wrote:BTW, I can't figure out how to do a text-copy from the NS menu.
Like this -
barbaz wrote:Right-click the NoScript Options menu item to copy the full script listing,
There isn't any feedback when it's copied. Maybe that's what's confusing you?

Re: Firefox freezes when loading most pages on The Guardian

by ginahoy » Thu Aug 03, 2017 8:19 pm

This doesn't make sense. I've been on these 2 sites at least a half-dozen times in the past several days and consistently got XSS warnings. In the case of sysop forum, I confirmed it didn't matter if I was signed in or not (although warnings only ocurr at the topic level). Now, neither site generates a warning!! And I didn't make any changes to NS settings or permissions since my previous message. I'll wait to post noscript permissions when XSS warnings recur since additional scripts may be running that are associated with XSS attempts.

BTW, I can't figure out how to do a text-copy from the NS menu. Otherwise I can upload a screenshot to my server since this forum doesn't support attachments or image pasting.

Re: Firefox freezes when loading most pages on The Guardian

by barbaz » Thu Aug 03, 2017 6:59 pm

Nothing obviously XSS related in the console messages, and not seeing any XSS problems here. On sysopt, what script permissions do you have?
(Right-click the NoScript Options menu item to copy the full script listing, then paste here with Ctrl-V.)

Re: Firefox freezes when loading most pages on The Guardian

by ginahoy » Thu Aug 03, 2017 6:45 pm

Because the NoScript XSS warning specifies 'details are logged to the console', naturally I had checked and didn't see anything related to NS/ABE. Here are the console entries for the two sites. I turned off Logging and CSS. The first site had a bunch of JS warnings (forbidden header) so I also unchecked JS warnings. And I expanded JS errors in case that's relevant:

https://sites.google.com/site/easylinux ... -mint-xfce

Code: Select all

SyntaxError: 'a[name=TOC-TEN-ESSENTIAL-ACTIONS:]' is not a valid selector  jot_min_view__en.js:439
	t.bv https://ssl.gstatic.com/sites/p/568a6b/system/js/jot_min_view__en.js:439:225
	t.tw https://ssl.gstatic.com/sites/p/568a6b/system/js/jot_min_view__en.js:439:138
	t.uw https://ssl.gstatic.com/sites/p/568a6b/system/js/jot_min_view__en.js:438:767
	<anonymous> https://ssl.gstatic.com/sites/p/568a6b/system/js/jot_min_view__en.js:438:614
	window.JOT_postEvent https://sites.google.com/site/easylinuxtipsproject/first-mint-xfce:12:276
	<anonymous> https://sites.google.com/site/easylinuxtipsproject/first-mint-xfce:1173:7
	<anonymous> https://sites.google.com/site/easylinuxtipsproject/first-mint-xfce:1165:6
Error: Bad hint: invalid_prefix  proxy.html:3:1224
	N https://content.googleapis.com/static/proxy.html:3:1224
	ka https://content.googleapis.com/static/proxy.html:5:194
	la https://content.googleapis.com/static/proxy.html:3:1920
	L.m https://content.googleapis.com/static/proxy.html:6:350
	ja https://content.googleapis.com/static/proxy.html:3:1708
	Y https://content.googleapis.com/static/proxy.html:11:55
	Z https://content.googleapis.com/static/proxy.html:9:176
	A.load/< https://content.googleapis.com/static/proxy.html:11:419
	X https://content.googleapis.com/static/proxy.html:11:339
	A.load https://content.googleapis.com/static/proxy.html:11:399
	<anonymous> https://content.googleapis.com/static/proxy.html:12:1
http://www.sysopt.com/showthread.php?20 ... k-log-file (I only expanded the last JS error, the others are similar)

Code: Select all

TypeError: googletag.defineOutOfPageSlot is not a function[Learn More]  showthread.php:118:15
TypeError: googletag.display is not a function[Learn More]  showthread.php:221:9
Password fields present on an insecure (http://) page. This is a security risk that allows user login credentials to be stolen.[Learn More]  showthread.php
TypeError: googletag.display is not a function[Learn More]  showthread.php:2261:9
TypeError: googletag.display is not a function[Learn More]  showthread.php:2272:9
TypeError: googletag.display is not a function[Learn More]  showthread.php:2322:9
TypeError: googletag.display is not a function[Learn More]  showthread.php:2390:9
	<anonymous> http://www.sysopt.com/showthread.php:2390:9
	<anonymous> http://www.sysopt.com/showthread.php:2386:2

Re: Firefox freezes when loading most pages on The Guardian

by barbaz » Thu Aug 03, 2017 4:45 pm

Please check the Browser Console (Ctrl-Shift-J) when this issue happens and post here any messages related to NoScript.
(related messages usually start with either "[NoScript" or "[ABE]"; if you don't know what's related, turn off CSS warnings and post everything else you see)

Re: Firefox freezes when loading most pages on The Guardian

by ginahoy » Thu Aug 03, 2017 6:57 am

Coincidentally, since implementing the previously recommended XSS exceptions and ABE rules, I've been experiencing XSS warnings on more sites. Here are a couple of examples where I have to repeatedly dismiss XSS warnings:

https://sites.google.com/site/easylinux ... /mint-xfce
http://sysopt.com/showthread.php?209341 ... k-log-file (drilling down to any individual discussion triggers XSS warning)

Rather than prescribing a fix, it would be helpful if someone could explain how to work out the XSS exceptions and ABE rules so I don't have to keep coming back here for assistance.

Re: Firefox freezes when loading most pages on The Guardian

by barbaz » Mon Jul 17, 2017 2:50 am

ginahoy wrote:Ok, just so I understand... doesn't NS block scripts from domains that I forbid?
Yes, it does, but only the scripts. The XSS exception applies to ALL resources.

Since allowing this XSS is very unsafe, ALL requests covered by the exception must be blocked.

This is why even if you Forbid bluekai and googlesyndication, it is still prudent to use the ABE rule.

Re: Firefox freezes when loading most pages on The Guardian

by ginahoy » Mon Jul 17, 2017 1:28 am

Ok, just so I understand... doesn't NS block scripts from domains that I forbid?

Top