viewtopic.php?f=7&t=20017
viewtopic.php?f=7&t=20023
viewtopic.php?f=7&t=20014
NoScript >= 2.6.8.37rc3 doesn't properly handle allowing scripts served over non-standard ports.
STR:
1) set up a server to listen on port 80 and 8926 (8926 chosen randomly as something completely weird)
2) connect normally to the server via its hostname (on port 80)
3) navigate to this testpage:
Code: Select all
<!DOCTYPE html>
<script type="text/javascript;version=1.8" src="http://[SERVER'S_IP_ADDRESS]:8926/ftp/qqqq.js"></script>
<div>Alternate Port Test Page</div>Code: Select all
alert("Cuckoo");Expected results: get an alert box
Actual results: nothing happens, scripts shown as partially allowed (but no option to allow the missing script), and you have to load the qqqq.js manually after allowing the IP address (then manually reload the page) in order to get the alert box.
