[FIXED] NoScript + JSON in Firefox 53

Bug reports and enhancement requests
Post Reply
jester
Posts: 1
Joined: Tue Apr 25, 2017 12:52 pm

[FIXED] NoScript + JSON in Firefox 53

Post by jester »

The new JSON Viewer in Firefox 53 doesn't work with NoScript unless you allow scripts for that domain and uncheck "Block scripting in whitelisted subdocuments of non-whitelisted pages". testpage: http://httpbin.org/headers

The testpage doesn't load any scripts at all, it's just pure JSON, but NoScript blocks the Firefox parts that display the JSON in a "nicer" way. I assume "Block scripting in whitelisted subdocuments of non-whitelisted pages" does exactly what it says it does, but it would be nice if Firefox "chrome" code could be exempt from that somehow. And also not "pretend" like there's some JS when there really is not. Thanks
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:53.0) Gecko/20100101 Firefox/53.0
barbaz
Senior Member
Posts: 10834
Joined: Sat Aug 03, 2013 5:45 pm

Re: NoScript + JSON in Firefox 53

Post by barbaz »

jester wrote:The new JSON Viewer in Firefox 53 doesn't work with NoScript unless you allow scripts for that domain
Confirmed. The site needs to be allowed because Firefox's JSON viewer injects its own JS into the page.

This message appears in the Browser Console (Ctrl-Shift-J), but I'm not sure it's relevant as I'm seeing it even when the JSON viewer works.

Code: Select all

TypeError: hints.context is null[Learn More]  chrome://noscript/content/Policy.js:64:1
jester wrote:and uncheck "Block scripting in whitelisted subdocuments of non-whitelisted pages".
Confirmed as well. This part looks like a NoScript bug to me.

Moving thread to NoScript Development.
*Always* check the changelogs BEFORE updating that important software!
-
User avatar
Giorgio Maone
Site Admin
Posts: 9454
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: NoScript + JSON in Firefox 53

Post by Giorgio Maone »

Investigating, thanks.
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:53.0) Gecko/20100101 Firefox/53.0
User avatar
Giorgio Maone
Site Admin
Posts: 9454
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: NoScript + JSON in Firefox 53

Post by Giorgio Maone »

Fixed in latest development build 5.0.4rc1, thanks.
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:53.0) Gecko/20100101 Firefox/53.0
barbaz
Senior Member
Posts: 10834
Joined: Sat Aug 03, 2013 5:45 pm

Re: NoScript + JSON in Firefox 53

Post by barbaz »

Partially fixed. It now works for me with scripts forbidden. But setting noscript.restrictSubdocScripting to true still breaks it.
*Always* check the changelogs BEFORE updating that important software!
-
barbaz
Senior Member
Posts: 10834
Joined: Sat Aug 03, 2013 5:45 pm

Re: NoScript + JSON in Firefox 53

Post by barbaz »

Bump, because this is still an issue in NoScript 5.1.8.3rc1 with Firefox 56 and Waterfox 56.

Allowing moz-nullprincipal: looks to work around this issue, but how safe is that?
*Always* check the changelogs BEFORE updating that important software!
-
barbaz
Senior Member
Posts: 10834
Joined: Sat Aug 03, 2013 5:45 pm

Re: NoScript + JSON in Firefox 53

Post by barbaz »

bump
*Always* check the changelogs BEFORE updating that important software!
-
barbaz
Senior Member
Posts: 10834
Joined: Sat Aug 03, 2013 5:45 pm

Re: NoScript + JSON in Firefox 53

Post by barbaz »

Giorgio, if this is not going to be fixed in the near future, can you please provide an answer to this question? -
barbaz wrote:Allowing moz-nullprincipal: looks to work around this issue, but how safe is that?
Thanks.
*Always* check the changelogs BEFORE updating that important software!
-
User avatar
Giorgio Maone
Site Admin
Posts: 9454
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: NoScript + JSON in Firefox 53

Post by Giorgio Maone »

Please check latest development build, thanks.
v 5.1.8.5rc1
=============================================================
x Fixed JSON interactive view disabled by cascading
restrictions (thanks jester for reporting)

x Fixed ABE Anon action loop with e10s enabled (thanks barbaz
for reporting)
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0
barbaz
Senior Member
Posts: 10834
Joined: Sat Aug 03, 2013 5:45 pm

Re: NoScript + JSON in Firefox 53

Post by barbaz »

Fixed, thank you Giorgio Image
*Always* check the changelogs BEFORE updating that important software!
-
Post Reply