InformAction Forums

OK, thanks for the sample. Please understand I keep asking for information because I can't reproduce on my side with several local HTML files, which may differ from yours in some significant way, though. Also, did you try on a clean profile? Thank you. [EDIT] I've tried your sample, and ...

bernie

... Content Security Policy: The page’s settings blocked the loading of a resource at inline (“script-src”). Oops. I just put .36 back and the little html file I am testing with loaded with no problem and it threw the same error [about script-src] so that wasn't the cause of the looping. that was ...

bernie

... arrow is flashing over and over]. i have noscript set to "untrusted" for file:// but it doesn't help. I cannot find a way to open any "local" HTML file with noscript enabled. IT just started happening a few days ago and nothing that I'm aware of has changed. How would I debug this?

GloriaH

... every morning updating a website. Same process every day. One of the steps is, I group together files in a directory and code their names into an html file. Before I use ftp to upload to my website, I open the html file and click on each link to those files to error check. This morning, I got ...

szpak

... allow scripts for that given file (nice!) and it works fine. However there is one issue. Being at: file:///home/foo/Documents/presentation5/pres.html#17 (page 17 of that presentation) NoScript doesn't recognized it as file:///home/foo/Documents/presentation5/pres.html anylonger and F5 results ...

... a fallback in case something goes wrong with webRequest). To further complicate things, Firefox (and only Firefox: Chromium doesn't) parses the <html> and the <head> elements (and the content of the latter) of file: and ftp: pages before executing extensions' content scripts. So we need to jump ...

Of course there is another problem with the above. <html onclick="console.log('CLICK')"></html> Any event attribute in element that gets parsed before the CSP is inserted, is not blocked. For documentElement (<html>) this happens by default as it exists ...

... beforescriptexecute safety net, the script in the next sample will not be blocked on file: protocol. Does not appear to cause problems on http:. <html> <head> <script src="notblocked.js"></script> </head> <body></body> </html> After doing some testing, it looks like suspending in mutationobserver ...

... listeners do not work. // Environment: // protocol: http: // scripts enabled // Deferred script is the one with "console.log("Foo")". <!DOCTYPE html> <html> <head> <link href="temp.css" rel="stylesheet" type="text/css" > <script> let a = document.createElement('script'); let m = document.getElementsByTagName('script')[0]; ...

Please check latest dev build:

v 11.0.35rc3
============================================================
x Work-around for conflict with extensions inserting
elements into content pages' DOM early
x [XSS] Updated HTML events

Please check latest dev build:

v 11.0.35rc3
============================================================
x Work-around for conflict with extensions inserting
elements into content pages' DOM early
x [XSS] Updated HTML events

... and the noscript tag contains stuff that doesn't belong to the head, Firefox moves it to the body. Interesting. Consider this case: <!DOCTYPE html> <html> <head> <noscript> <style>body {background-color:red}</style> </noscript> <style>body {background-color:blue}</style> </head> <body></body> ...

The HTML of the page with scripts disabled, from devtools - <!DOCTYPE html> <html><head><script>document.write('<code>Javascript Is Enabled!!!!!!!!!</code>');</script> <span>Javascript Is Blocked Or Unavailable.</span></head><body></body></html> ...

Firefox 79 Dev Edition
NoScript 11.0.34rc1
new profile

Test page:

Code: Select all

<!doctype html>
<script>document.write('<code>Javascript Is Enabled!!!!!!!!!</code>');</script>
<noscript>Javascript Is Blocked Or Unavailable.</noscript>

With scripts blocked, this page is blank.

morganism

... } As part of the service worker’s install event, we can use the new cache API to cache the various moving parts of our website, such as HTML, CSS, and JavaScript:"

InformAction Forums

Search found 2810 matches: html

Re: Noscript puts FF in a reload loop

Re: Noscript puts FF in a reload loop

Noscript puts FF in a reload loop

thread hijacking split from t=26067

[Fixed] Ability to refresh page file:///tmp/page#13 with scripts enabled

Re: 11.0.37 src script

Re: 11.0.37 src script

11.0.37 src script

Re: Youtube embeds do not work since NoScript 11.0.35, in conjunction with BlockTube

Re: Conflict w/Adblocker X

Re: Conflict: Noscript (11.0.35rc2) and FoxClocks (5.2.5) on Youtube

Re: [Fixed] 11.0.34rc1 does not display <noscript> tags

Re: 11.0.34rc1 does not display <noscript> tags

11.0.34rc1 does not display <noscript> tags

Service workers allow website authors to intercept all network requests to their websites