Search found 213 matches

by skriptimaahinen
Thu Sep 17, 2020 1:05 pm
Forum: NoScript Development
Topic: 11.044rc file: objects and iframes
Replies: 3
Views: 216

Re: 11.044rc file: objects and iframes

Made another mistake. :oops: The domain for the iframe is seen as expected. I blame my confusing test case. However, there are still problems (affects rc4 too). The (http) domain for object is not seen on FF80, nor does the placeholder get placed. On FF81 it works as expected. The difference seems t...
by skriptimaahinen
Wed Sep 16, 2020 9:34 am
Forum: NoScript Development
Topic: 11.044rc file: objects and iframes
Replies: 3
Views: 216

Re: 11.044rc file: objects and iframes

Made a mistake. The iframes are not seen at all. The media checkbox is red on ALL pages regardless whether there is any media on the page or not. This seems to be a bug introduced in the YouTube fix of 11.0.44rc3.
by skriptimaahinen
Wed Sep 16, 2020 8:00 am
Forum: NoScript Development
Topic: [FIXED] 11.0.44rc SVG problems
Replies: 11
Views: 357

Re: 11.0.44rc SVG problems

Looks good. Thanks!
by skriptimaahinen
Tue Sep 15, 2020 8:50 am
Forum: NoScript Development
Topic: [FIXED] 11.0.44rc SVG problems
Replies: 11
Views: 357

Re: 11.0.44rc SVG problems

Should have pointed out that this indeed happens when soft reloading and the readyState is "completed". I can achieve this by using the "navigate to about:newtab and back". The patch does fix it for my test cases, but now your test case (the older one with alert) fires the onload twice. When doing n...
by skriptimaahinen
Mon Sep 14, 2020 10:08 am
Forum: NoScript Development
Topic: 11.044rc file: objects and iframes
Replies: 3
Views: 216

11.044rc file: objects and iframes

(On file: protocol. http: not affected.) Object and iframe sources are not seen. The domains are not listed in the popup. Affects FF80 (when document.write is used). Iframes are seen as media. (Media checkbox has red background when there is only iframe in the page.) Affects both FF 80 & 81. Iframes...
by skriptimaahinen
Mon Sep 14, 2020 7:10 am
Forum: NoScript Development
Topic: [FIXED] 11.0.44rc SVG problems
Replies: 11
Views: 357

Re: 11.0.44rc SVG problems

External and inline scripts run fine now.

However, onload event attribute in <svg> does not execute. load/DOMContentLoaded added with addEventListener do fire though.
by skriptimaahinen
Sun Sep 13, 2020 1:36 pm
Forum: NoScript Development
Topic: [FIXED] 11.0.44rc cs order problem
Replies: 3
Views: 212

Re: 11.0.44rc cs order problem

Typo in staticNS.js:49 - pendingFetchPolicy should be pendingSyncFetchPolicy, I assume.
by skriptimaahinen
Sun Sep 13, 2020 12:49 pm
Forum: NoScript Development
Topic: [FIXED] 11.0.44rc SVG problems
Replies: 11
Views: 357

Re: 11.0.44rc SVG problems

Still present in rc3. It's pretty hard to reproduce on FF81, but should happen quite often on FF80. And there doesn't seem to be anything wrong with your test case. Happens with that too. On FF81 the code hardly ever hits the document.write() due to the suspend working. On FF80 that is where it ends...
by skriptimaahinen
Sat Sep 12, 2020 8:39 am
Forum: NoScript Development
Topic: [FIXED] 11.0.44rc cs order problem
Replies: 3
Views: 212

[FIXED] 11.0.44rc cs order problem

A weird one that took too much of my time. Sometimes (very rarely) the SyncFetchPolicy fails to run on the page (both FF 80 & 81). Could not figure a surefire way to reproduce, but here are the steps that might manifest it: - Open any page. - Reload and/or navigate to about:newtab and back. (Maybe n...
by skriptimaahinen
Sat Sep 12, 2020 8:38 am
Forum: NoScript Development
Topic: [FIXED] 11.0.44rc SVG problems
Replies: 11
Views: 357

[FIXED] 11.0.44rc SVG problems

NS 11.0.44rc2: Still problem with SVGs that have inline scripts but no external scripts.

FF80: Scripts fail to run on every page load.
FF81: Scripts fail to run when navigating to about:newtab and back.
by skriptimaahinen
Fri Sep 04, 2020 9:50 am
Forum: NoScript Development
Topic: 11.0.41
Replies: 26
Views: 2816

Re: 11.0.41

Chromium doesnt need it: you can insert a propery namespaced HTML element in as a child of the <svg> element, and the <meta> csp you add there just work. Not familiar with XML/HTML namespaces enough to say which one is proper behaviour or if there is even any specification for this. Luckily this wo...
by skriptimaahinen
Fri Sep 04, 2020 5:07 am
Forum: NoScript Development
Topic: 11.0.41
Replies: 26
Views: 2816

Re: 11.0.41

Actually XML files are not impervious to CSP. The problem is simply how to write the CSP as <head> has no special meaning in XML generally. The situation is quite similar to as when we tried to write CSP to HTML in document-start and the head was not parsed yet. But now we do not even have anything ...
by skriptimaahinen
Thu Sep 03, 2020 5:05 am
Forum: NoScript Development
Topic: feature request I've always wanted: trigger NoScript on other items besides scripts
Replies: 3
Views: 594

Re: feature request I've always wanted: trigger NoScript on other items besides scripts

Each of those technologies is detected separately. So if the page has no javascript but some external fonts are used, Noscript will list the domain. Same goes for frames, objects and media. Fetch, ping and webgl can only be used with javascript, so javascript needs to be enabled before they can be u...
by skriptimaahinen
Wed Sep 02, 2020 12:41 pm
Forum: NoScript Development
Topic: 11.0.41
Replies: 26
Views: 2816

Re: 11.0.41

Well, something did change with FF 81. The problem with events attributes on HTML page does not occur anymore with normal page reloads. It doesn't seem to happen on session restore or tab restore either, but it still does happen when navigating to another page and back. NOTE: The other page needs to...
by skriptimaahinen
Tue Sep 01, 2020 12:49 pm
Forum: NoScript Development
Topic: 11.0.41
Replies: 26
Views: 2816

Re: 11.0.41

Looks like special handling of onload in body needs to be done a bit later, so that it's certain the body has been parsed. DOMContentLoaded seems a good candidate. Doing it in a mutationobserver is also a possibility. But it's not just onload. Also onunload and onpagehide share the same problem. The...