Page 1 of 1

NoScript does not show what is blocked for Lastpass

Posted: Sun Dec 01, 2019 7:30 pm
by jimoe
NoScript v11.0.10rc1

I opened a Lastpass vault and selected Account Settings. It looked like something opened but nothing showed, clicks anywhere on the page were ignored. The NoScript icon showed 1 site was blocked. When I opened the block list, "This is a privileged page, whose permissions cannot be configured" was all there was. Reloading the page cleared the non-action feature.

By disabling NoScript for the tab the Lastpass settings panel opened.

I note the current version is 11.0.9. Even though Automatic Updates are enabled, version 11.0.10rc1 has remained.

Re: NoScript does not show what is blocked for Lastpass

Posted: Sun Dec 01, 2019 7:33 pm
by jimoe
I just updated to v11.0.9. It made no difference.

Re: NoScript does not show what is blocked for Lastpass

Posted: Mon Dec 02, 2019 2:18 pm
by Giorgio Maone
Does the console for that page (ctrl+shift+K) show anything interesting?
Thanks.

Re: NoScript does not show what is blocked for Lastpass

Posted: Mon Dec 02, 2019 8:09 pm
by jimoe
Does the console for that page (ctrl+shift+K) show anything interesting?
Yes?
Here is a screenshot: <https://www.dropbox.com/s/5slxqdyeb4us2 ... -12-02.png>

Re: NoScript does not show what is blocked for Lastpass

Posted: Mon Dec 02, 2019 8:54 pm
by barbaz
Do you have lastpass.com set to TRUSTED?

Re: NoScript does not show what is blocked for Lastpass

Posted: Mon Dec 02, 2019 10:42 pm
by jimoe
Do you have lastpass.com set to TRUSTED?
Yes.

Re: NoScript does not show what is blocked for Lastpass

Posted: Mon Dec 02, 2019 11:41 pm
by Giorgio Maone
Can I see also the content of the navigation bar (i.e. the actual URL of this "vault")?
Could you please check NoScript Options>Advanced>Debug, clear the console, load this page and copypaste the entire content of the console?
Thanks!

Re: NoScript does not show what is blocked for Lastpass

Posted: Tue Dec 03, 2019 5:19 pm
by jimoe
Can I see also the content of the navigation bar (i.e. the actual URL of this "vault")?
moz-extension://79c669c2-00af-4fd6-9798-30c2cb7fca8a/vault.html
Could you please check NoScript Options>Advanced>Debug, clear the console, load this page and copypaste the entire content of the console?
Did that. The following message displayed above a bright yellow box.

Code: Select all

Policy:
JSON.parse: unexpected end of data at line 1 column 1 of the JSON data

Re: NoScript does not show what is blocked for Lastpass

Posted: Tue Dec 03, 2019 9:29 pm
by Giorgio Maone
Hmm, I've created a test account on Lastpass and the valut page (which is actually privileged, being a moz-ext: one) seems to work just fine, no matter whether lastpass.com is enabled or not. I've tried both on Firefox 71 and on Firefox 68.0.2, since you appear to be on ESR.

Does your problem persist also with a clean profile with just NoScript and LastPass installed?