InformAction Forums

If you really want to see the comments, you could try changing your ABE rule like this... Of course! Thanks for the tip! I said I couldn't get the comments working at all, not even in a clean profile without NoScript. Sorry if it wasn't clear. When you posed the question how long the site takes, I ...

The "View Comments" button doesn't seem to work for me even in a completely clean profile without NoScript or any other extensions. Yeah, that was the first thing I noticed, and presumably has nothing to do with the comment script error since it still does that when the comments work, as ...

Sorry, I should have pointed out that I'm able to reproduce the comment script issue for any site that has comments, not just ones that are down. For example, you can test google.com. Here's a copy of my console. These are Security Warnings (red exclamation mark): Content Security Policy: Ignoring “...

When http://isitdownrightnow.com reports a site is down and there are comments posted, the script that loads the comment string doesn't work with NoScript. I tried removing all script blocks that are active on this site and still no cigar. However, if I disable NoScript, the comments load. What more...

Generally, whenever I visit a site that generates objects in the default list, I block each object that I can verify it doesn't impact the site. I obviously have no clue if a blocked object might later break another site. I don't really understand your perspective here. I see NS as a tool for preve...

That behavior is by design. You aren't supposed to move domains from untrusted to temp allow anyway. The untrusted list is for domains that you know you don't trust, not even temporary. Huh. Then what's the purpose of "Temporarily allow (site)" for entries in the Untrusted list? Is this j...

When I "temporary allow" a site that's listed as Untrusted, I expect that site to revert to Untrusted status after I close the page, or at least after I close and reopen FF. But that's not what's happening. I have to click "Forbid" again. As it turns out, Temporary Allow permanen...

Is it OK to add # comments to the XSS exception list? I've seen it done before but IIRC, it's environment dependent.

Sorry, my bad. I added to USER instead of SYSTEM... not sure if that's what you edited, but I've been known to not read something carefully

Working now! Thanks.

The ABE feedback popup was MUCH shorter (the part after the <<<), but presumably that's because I generated the error in a different way. But the DENY is the same.. POST https://metrics.plex.tv/collect/event [HTTP/2.0 200 OK 576ms] PUT XHR https://plex.tv/api/v2/pins/link [HTTP/1.1 204 No Content 52...

I recently downloaded Plex Media Server on my new Linux machine. To set up PMS, I must sign into my Plex account, upon which, I get the following ABE feedback: http://bit.ly/2hHa1Vs. The site confirms successful sign-in, but fails to redirect me to my local Plex server page. I had to disable ABE to ...

Excellent! Finally I can visit tripadvisor without first unloading NS! I see from the other thread I could have accomplished the same by temporarily disabling XSS. If this is eventually resolved in a new version, please post an update here so those following this thread can remove XSS exceptions. BT...

Although I may circle back to the XSS warnings (re: the last several posts), I wanted to update this thread on the original topic. As noted in previous comments, the June 30 development release and ABE/XSS tweaks suggested by Barbaz seemed to improve performance on sites like tripadvisor. I attribut...

This doesn't make sense. I've been on these 2 sites at least a half-dozen times in the past several days and consistently got XSS warnings. In the case of sysop forum, I confirmed it didn't matter if I was signed in or not (although warnings only ocurr at the topic level). Now, neither site generate...

Because the NoScript XSS warning specifies 'details are logged to the console', naturally I had checked and didn't see anything related to NS/ABE. Here are the console entries for the two sites. I turned off Logging and CSS. The first site had a bunch of JS warnings (forbidden header) so I also unch...