InformAction Forums

Thank you very much

I read about regex and related posts here, nevertheless I cannot find the correct exception for this blocking: [NoScript] Blocking cross-site Javascript served from https://www.img-bahn.de/appcontent/jsonp/auskunft/customer_content_reiseauskunft_crosssell1_pk_de_DEU.txt with wrong type info text/pla...

Thrawn wrote: Are you aware that ABE logs its results to the Browser Console?

Well, now I am, thank you very much.
I will try next time to see whether this is of help for me to find out more easily about the correct ABE settings.

On sites with scripts from many domains configuring NS and ABE is sometimes very difficult and time consuming, and too often I fail to get a site working correctly. (See also this thread http://forums.informaction.com/viewtopic.php?f=10&t=19328) What would help a lot is a different NS menu icon ...

Unfortunately I am not able to develop this, but I want to second this idea. There are quite a few web sites I have to view either with disabled NS or with IE. Allowing all scripts is sometimes not enough because that feature doesn't disable ABE. On sites with scripts from many domains configuring N...

Thrawn wrote:So...it breaks if you force https for .amazon.de?

No, it doesn't make a difference whether it is "*.amazon.de" or ".amazon.de".
It breaks as soon as I remove "www.amazon.de" from the list of unsecured cookies for HTTPS.

That's not the problem. 1. I tried and the problem comes back. 2. In my previous settings I excluded "www.amazon.de" from secure cookie management, not ".amazon.de". That made the problem disappear. The cookies with this url obviously did not make the problem although I had "...

Thrawn wrote:OK, that's progress .

What is the exact domain where you are forcing HTTPS connections?

Same as for secure cookies: "*.amazon.de".

The domains are ".amazon.de" (several cookies, permissions mixed: part of them is HTTP only, others are for any connection) and "www.amazon.de" (one cookie, permission for any connection). I use "*.amazon.de" in the secure cookies settings. After I added ignore insecure...

Thrawn wrote: But are you saying that even with HTTPS forced, you still can't force secure cookies without breaking it? That would be weird.

Yes, isn't it? HTTPS forced or not without secure cookies works. Secure cookies with or without HTTPS forced breaks it.

Thrawn wrote: You could try forcing the whole site to use HTTPS; either that will fix the problem and secure everything, or the site won't handle HTTPS and it will break.

Forcing HTTPS works without problem, as soon as I add amazon.de to secure cookie handling the function of the site is broken.

Thrawn, unfortunately your assumption was correct that there is no help by amazon:
"There may have been changes to our site ... no information about these changes. Please, ask for help at support for your browser."

What may have changed that the secure cookie management worked for a long time and now it corrupts the site? The site has probably changed. It's unfortunate that they've changed in a way that doesn't allow proper security, but there's not much to do except work around it. You could email their webm...

Anything in the Browser Console (Ctrl+Shift+J)? Hi Thrawn, yes, among others there were plenty of these entries: [NoScript HTTPS] FORCED SECURE on https://www.amazon.de: ... That made me look into the settings for secure cookie management. And, indeed, there I had an entry for amazon.de which I mad...

Hi, the last time I was shopping on amazon.de is a few months ago. Now NS makes severe problems. I made no changes in the NS settings regarding amazon. When I click on payment button in shopping cart I get the login screen and cannot proceed. The login screen returns permanently. The same happens wh...