Search found 220 matches

by skriptimaahinen
Sun Apr 04, 2021 8:53 am
Forum: NoScript General
Topic: Simple explanation of what is "CSS PP0"?
Replies: 5
Views: 475

Re: Simple explanation of what is "CSS PP0"?

Two things that came in to mind when skimming through the white paper: The paper does not seem to mention what FireFox version they used, if any at all besides DeterFox and TorBrowser. Since FF85, FireFox has been doing cache partitioning , that supposedly prevents timing attacks on caches among oth...
by skriptimaahinen
Sat Apr 03, 2021 10:58 am
Forum: NoScript Development
Topic: Feature request to enable/disable PP0 protection.
Replies: 10
Views: 420

Re: Feature request to enable/disable PP0 protection.

Seems fine to have the protection as permission. However, none of the suggested renames make it any more clear whether one should check or uncheck the option to prevent this mysterious threat (not that the original tells anything either). So I assume there will be lot of questions about this in any ...
by skriptimaahinen
Wed Mar 31, 2021 10:51 am
Forum: NoScript Development
Topic: Feature request to enable/disable PP0 protection.
Replies: 10
Views: 420

Feature request to enable/disable PP0 protection.

Feature request:

Advanced-tab checkbox to enable/disable PP0 protection, similarly as with XSS sanitation.


Bonus typo: (too lazy to make separate post)

nscl/content/prefetchCSSResources.js:37 "rarget"

Though I have hard time figuring out what is the use case for wrapCssAccess...
by skriptimaahinen
Mon Mar 15, 2021 8:26 am
Forum: NoScript Support
Topic: [Fixed] 11.2.4rc1 DoS's some sites
Replies: 4
Views: 419

Re: 11.2.4rc1 DoS's some sites

Get the same problem. Though, there are lots of pages where I see no prefetching even when I would expect it. Are all CSS resources supposed to be prefetched or what are the conditions?
by skriptimaahinen
Mon Mar 15, 2021 8:25 am
Forum: NoScript Development
Topic: Patch window.opener if present
Replies: 2
Views: 416

Patch window.opener if present

This flew under my radar. Few notes: 1. window.opener is not a fresh window and _should_ always be patched before a new window can be opened (AFAIK). 2. If the opener and opened windows are not same-origin, trying to get canvas context will result in cross-origin block, whether opener is patched or...
by skriptimaahinen
Sun Nov 01, 2020 7:53 am
Forum: NoScript Support
Topic: invidious+Firefox78/82+Redirector+NoScript = "No video with supported format and MIME type found."
Replies: 9
Views: 1449

Re: invidious+Firefox78/82+Redirector+NoScript = "No video with supported format and MIME type found."

michkov wrote:
Sun Nov 01, 2020 6:34 am
https://content.blubrry.com/hoseasia/HoSEA014.mp3

I need to allow blubrry.com to get the mp3 to play.
For me the file plays just fine.

What permissions you need to allow for blubrry.com for the file to play? Is just media enough?
by skriptimaahinen
Sat Oct 31, 2020 7:59 am
Forum: NoScript Support
Topic: invidious+Firefox78/82+Redirector+NoScript = "No video with supported format and MIME type found."
Replies: 9
Views: 1449

Re: invidious+Firefox78/82+Redirector+NoScript = "No video with supported format and MIME type found."

Some odd behaviour from Firefox going on here. When doing a redirect (webrequest) from urlA to a media file urlB, the currentSrc of the media element is initially set to be the original urlA. Though the url is later updated by Firefox to the correct one, this really seems like a bug. Unfortunately s...
by skriptimaahinen
Thu Sep 17, 2020 1:05 pm
Forum: NoScript Development
Topic: 11.044rc file: objects and iframes
Replies: 3
Views: 1190

Re: 11.044rc file: objects and iframes

Made another mistake. :oops: The domain for the iframe is seen as expected. I blame my confusing test case. However, there are still problems (affects rc4 too). The (http) domain for object is not seen on FF80, nor does the placeholder get placed. On FF81 it works as expected. The difference seems t...
by skriptimaahinen
Wed Sep 16, 2020 9:34 am
Forum: NoScript Development
Topic: 11.044rc file: objects and iframes
Replies: 3
Views: 1190

Re: 11.044rc file: objects and iframes

Made a mistake. The iframes are not seen at all. The media checkbox is red on ALL pages regardless whether there is any media on the page or not. This seems to be a bug introduced in the YouTube fix of 11.0.44rc3.
by skriptimaahinen
Wed Sep 16, 2020 8:00 am
Forum: NoScript Development
Topic: [FIXED] 11.0.44rc SVG problems
Replies: 11
Views: 1493

Re: 11.0.44rc SVG problems

Looks good. Thanks!
by skriptimaahinen
Tue Sep 15, 2020 8:50 am
Forum: NoScript Development
Topic: [FIXED] 11.0.44rc SVG problems
Replies: 11
Views: 1493

Re: 11.0.44rc SVG problems

Should have pointed out that this indeed happens when soft reloading and the readyState is "completed". I can achieve this by using the "navigate to about:newtab and back". The patch does fix it for my test cases, but now your test case (the older one with alert) fires the onload twice. When doing n...
by skriptimaahinen
Mon Sep 14, 2020 10:08 am
Forum: NoScript Development
Topic: 11.044rc file: objects and iframes
Replies: 3
Views: 1190

11.044rc file: objects and iframes

(On file: protocol. http: not affected.) Object and iframe sources are not seen. The domains are not listed in the popup. Affects FF80 (when document.write is used). Iframes are seen as media. (Media checkbox has red background when there is only iframe in the page.) Affects both FF 80 & 81. Iframes...
by skriptimaahinen
Mon Sep 14, 2020 7:10 am
Forum: NoScript Development
Topic: [FIXED] 11.0.44rc SVG problems
Replies: 11
Views: 1493

Re: 11.0.44rc SVG problems

External and inline scripts run fine now.

However, onload event attribute in <svg> does not execute. load/DOMContentLoaded added with addEventListener do fire though.
by skriptimaahinen
Sun Sep 13, 2020 1:36 pm
Forum: NoScript Development
Topic: [FIXED] 11.0.44rc cs order problem
Replies: 3
Views: 865

Re: 11.0.44rc cs order problem

Typo in staticNS.js:49 - pendingFetchPolicy should be pendingSyncFetchPolicy, I assume.
by skriptimaahinen
Sun Sep 13, 2020 12:49 pm
Forum: NoScript Development
Topic: [FIXED] 11.0.44rc SVG problems
Replies: 11
Views: 1493

Re: 11.0.44rc SVG problems

Still present in rc3. It's pretty hard to reproduce on FF81, but should happen quite often on FF80. And there doesn't seem to be anything wrong with your test case. Happens with that too. On FF81 the code hardly ever hits the document.write() due to the suspend working. On FF80 that is where it ends...