Page 2 of 2

Re: [Config workaround] NS 5.0.4 stalls firefox on Postillon

Posted: Fri May 26, 2017 4:28 pm
by cepheus
barbaz wrote:Does the hanging occur with NoScript latest development build?
Unfortunately, yes (NoScript 5.0.5rc10).

Re: [Config workaround] NS 5.0.4 stalls firefox on Postillon

Posted: Fri May 26, 2017 9:45 pm
by barbaz
Since the XSS filter is performing like cold molasses just to do nothing, and since it wasn't like this in previous versions, I would agree this sounds like a NoScript bug. So, moving to NoScript Development as a bug report. Thanks

Re: NS 5.0.4 & later - XSS filter stalls firefox on Postillo

Posted: Mon May 29, 2017 3:21 pm
by Alice_Redhat
I have the same configuration as Baltasar4711 and was having the same issue. Some websites would cause FF to "stop responding" and no amount of wait time would stop the hang, only a hard close. I thought there was something wrong with my profile, etc. But when I traced it back, I noticed it started with the last update to NoScript.

I'm by no means an expert but since disabling XSS did not eliminate the hangs, I decided to try the latest dev build knowing I could always re-install 5.0.4 again or disable oScript until I thought it was fixed (which I didn't really want to do). It seems to be fixed in the 5.0.5.rc12 build. I tested it by going to the websites where I knew it was hanging and forcing me to close FF. Good work at fixing it so fast!

Re: NS 5.0.4 & later - XSS filter stalls firefox on Postillo

Posted: Tue Jun 20, 2017 4:33 pm
by Giorgio Maone
This should be a regression in the XSS filter performance in face of large JSON payloads, due to the recently added protection against several attacks exploiting popular template engines.

I'm about to release a fix for it, stay tuned.

Re: NS 5.0.4 & later - XSS filter stalls firefox on Postillo

Posted: Fri Jun 30, 2017 12:09 am
by Giorgio Maone
Please check latest development build 5.0.6rc5, thanks.

Re: NS 5.0.4 & later - XSS filter stalls firefox on Postillo

Posted: Sun Jul 09, 2017 9:45 am
by Reindeer
Still happens with 5.0.6rc6 as described here viewtopic.php?f=10&t=23061

Re: NS 5.0.4 & later - XSS filter stalls firefox on Postillo

Posted: Sun Jul 09, 2017 4:05 pm
by barbaz
Reindeer, does it still happen with 5.0.6rc6 if you do this? - viewtopic.php?p=88089#p88089

Re: NS 5.0.4 & later - XSS filter stalls firefox on Postillo

Posted: Tue Jul 18, 2017 4:38 pm
by Reindeer
barbaz wrote:Reindeer, does it still happen with 5.0.6rc6 if you do this? - viewtopic.php?p=88089#p88089
I added the two rules and it still freezes.
Are you not able to reproduce this bug? I can easily reproduce it with a clean profile.

Re: NS 5.0.4 & later - XSS filter stalls firefox on Postillo

Posted: Tue Jul 18, 2017 6:46 pm
by barbaz
Sorry, I was confusing this with another issue. I do reproduce this one with a clean profile, Firefox 54.0, NoScript 5.0.7rc1.

Looks like it's not the same issue as the other XSS filter hang. This one does not seem to subside, and it happens even with all scripts disabled. Doesn't matter whether e10s is on or off.

Disabling the XSS filter removes the hang.

I don't see related messages in the Browser Console, but I'm not sure how meaningful that is here.

Re: NS 5.0.4 & later - XSS filter stalls firefox on Postillo

Posted: Sat Jul 22, 2017 10:02 am
by BudeII
I'm impacted by this issue also.

Just want to say that the postillion site freezes on my system even when NoScript is general disabled.

Re: NS 5.0.4 & later - XSS filter stalls firefox on Postillo

Posted: Sat Jul 22, 2017 3:20 pm
by barbaz
BudeII wrote:Just want to say that the postillion site freezes on my system even when NoScript is general disabled.
Then you are experiencing a different problem. The issue discussed in this thread is definitely caused by NoScript's XSS filter, which doesn't run when NoScript is disabled.

Re: NS 5.0.4 & later - XSS filter stalls firefox on Postillo

Posted: Sun Jul 23, 2017 8:35 am
by bgmnt
barbaz wrote:
BudeII wrote:Just want to say that the postillion site freezes on my system even when NoScript is general disabled.
Then you are experiencing a different problem. The issue discussed in this thread is definitely caused by NoScript's XSS filter, which doesn't run when NoScript is disabled.
Firefox 54.0.1 64bit does hang when I have noscript 5.06 installed with "Forbid scripts globally". "sanitize cross-site suspicious requests" is still active in that case.
Disabling the noscript addon in the addon manager or disabling "sanitize cross-site suspicious requests" gets rid of the delay.

Re: NS 5.0.4 & later - XSS filter stalls firefox on Postillo

Posted: Mon Jul 24, 2017 9:25 pm
by Giorgio Maone
Please check latest development build 5.0.8rc1, thanks.

Re: NS 5.0.4 & later - XSS filter stalls firefox on Postillo

Posted: Mon Jul 24, 2017 10:38 pm
by barbaz
Seems fixed here, thanks! Image

Re: NS 5.0.4 & later - XSS filter stalls firefox on Postillo

Posted: Sun Aug 06, 2017 6:29 am
by BudeII
Issiue dissapered when using version 5.0.8.1, thanks!