[FIXED] NoScript + JSON in Firefox 53
[FIXED] NoScript + JSON in Firefox 53
The new JSON Viewer in Firefox 53 doesn't work with NoScript unless you allow scripts for that domain and uncheck "Block scripting in whitelisted subdocuments of non-whitelisted pages". testpage: http://httpbin.org/headers
The testpage doesn't load any scripts at all, it's just pure JSON, but NoScript blocks the Firefox parts that display the JSON in a "nicer" way. I assume "Block scripting in whitelisted subdocuments of non-whitelisted pages" does exactly what it says it does, but it would be nice if Firefox "chrome" code could be exempt from that somehow. And also not "pretend" like there's some JS when there really is not. Thanks
The testpage doesn't load any scripts at all, it's just pure JSON, but NoScript blocks the Firefox parts that display the JSON in a "nicer" way. I assume "Block scripting in whitelisted subdocuments of non-whitelisted pages" does exactly what it says it does, but it would be nice if Firefox "chrome" code could be exempt from that somehow. And also not "pretend" like there's some JS when there really is not. Thanks
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:53.0) Gecko/20100101 Firefox/53.0
Re: NoScript + JSON in Firefox 53
Confirmed. The site needs to be allowed because Firefox's JSON viewer injects its own JS into the page.jester wrote:The new JSON Viewer in Firefox 53 doesn't work with NoScript unless you allow scripts for that domain
This message appears in the Browser Console (Ctrl-Shift-J), but I'm not sure it's relevant as I'm seeing it even when the JSON viewer works.
Code: Select all
TypeError: hints.context is null[Learn More] chrome://noscript/content/Policy.js:64:1
Confirmed as well. This part looks like a NoScript bug to me.jester wrote:and uncheck "Block scripting in whitelisted subdocuments of non-whitelisted pages".
Moving thread to NoScript Development.
*Always* check the changelogs BEFORE updating that important software!
-
- Giorgio Maone
- Site Admin
- Posts: 9454
- Joined: Wed Mar 18, 2009 11:22 pm
- Location: Palermo - Italy
- Contact:
Re: NoScript + JSON in Firefox 53
Investigating, thanks.
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:53.0) Gecko/20100101 Firefox/53.0
- Giorgio Maone
- Site Admin
- Posts: 9454
- Joined: Wed Mar 18, 2009 11:22 pm
- Location: Palermo - Italy
- Contact:
Re: NoScript + JSON in Firefox 53
Fixed in latest development build 5.0.4rc1, thanks.
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:53.0) Gecko/20100101 Firefox/53.0
Re: NoScript + JSON in Firefox 53
Partially fixed. It now works for me with scripts forbidden. But setting noscript.restrictSubdocScripting to true still breaks it.
*Always* check the changelogs BEFORE updating that important software!
-
Re: NoScript + JSON in Firefox 53
Bump, because this is still an issue in NoScript 5.1.8.3rc1 with Firefox 56 and Waterfox 56.
Allowing moz-nullprincipal: looks to work around this issue, but how safe is that?
Allowing moz-nullprincipal: looks to work around this issue, but how safe is that?
*Always* check the changelogs BEFORE updating that important software!
-
Re: NoScript + JSON in Firefox 53
bump
*Always* check the changelogs BEFORE updating that important software!
-
Re: NoScript + JSON in Firefox 53
Giorgio, if this is not going to be fixed in the near future, can you please provide an answer to this question? -
Thanks.barbaz wrote:Allowing moz-nullprincipal: looks to work around this issue, but how safe is that?
*Always* check the changelogs BEFORE updating that important software!
-
- Giorgio Maone
- Site Admin
- Posts: 9454
- Joined: Wed Mar 18, 2009 11:22 pm
- Location: Palermo - Italy
- Contact:
Re: NoScript + JSON in Firefox 53
Please check latest development build, thanks.
v 5.1.8.5rc1
=============================================================
x Fixed JSON interactive view disabled by cascading
restrictions (thanks jester for reporting)
x Fixed ABE Anon action loop with e10s enabled (thanks barbaz
for reporting)
v 5.1.8.5rc1
=============================================================
x Fixed JSON interactive view disabled by cascading
restrictions (thanks jester for reporting)
x Fixed ABE Anon action loop with e10s enabled (thanks barbaz
for reporting)
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0
Re: NoScript + JSON in Firefox 53
Fixed, thank you Giorgio
*Always* check the changelogs BEFORE updating that important software!
-