[RESOLVED] Can't open http://to./ if NoScript is enabled

Bug reports and enhancement requests
Post Reply
User avatar
LouCypher
Posts: 9
Joined: Mon Nov 30, 2009 1:45 pm
Location: Jakarta, Indonesia (UTC+7)
Contact:

[RESOLVED] Can't open http://to./ if NoScript is enabled

Post by LouCypher »

 
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (clean profile)
NoScript 1.9.9.18 (default options)
prefs: keyword.enabled = true/false

Steps to reproduce:
Visit http://to./ by clicking the link or enter the URL in location bar

Expected result:
Loads http://to./

Actual result:
Redirects to http://www.to.com/


No problems on Firefox 3.6b4 with the same NoScript version, only on 3.5.5
 
Last edited by LouCypher on Tue Dec 01, 2009 10:17 pm, edited 1 time in total.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5
User avatar
therube
Ambassador
Posts: 7924
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: [BUG] Can't open http://to./ if NoScript is enabled

Post by therube »

to, does not work.
http://www.to, does & goes (presumably) to the expected page.
http://www.to.com, also works, going to a different page.

Are you sure it is not your domain name completion settings in FF that is making the difference?

(Or is this specifically a 3.6 issue?)
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.4) Gecko/20091017 SeaMonkey/2.0
User avatar
LouCypher
Posts: 9
Joined: Mon Nov 30, 2009 1:45 pm
Location: Jakarta, Indonesia (UTC+7)
Contact:

Re: [BUG] Can't open http://to./ if NoScript is enabled

Post by LouCypher »

 
It's http://to./ (yes, no TLD, or is using IDN ccTLD perhaps) not http://www.to/ 
It works in clean profile or safe mode

Image

and other browsers
 
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5
Alan Baxter
Ambassador
Posts: 1586
Joined: Fri Mar 20, 2009 4:47 am
Location: Colorado, USA

Re: [BUG] Can't open http://to./ if NoScript is enabled

Post by Alan Baxter »

http://to./ takes me to the web page you describe in both a new Firefox profile without any extensions and one that has only NoScript installed using its default settings. I am not redirected to http://www.to.com. Does your problem persist if you Reset your NoScript settings? (You might want to save them first with the Export button. It resets the whitelist too.) This may seem unnecessary to you, since you say you're performing your test in a clean test profile with only NoScript installed, with its default settings. It's just that I'm unable to reproduce your problem. I'm afraid it "works for me". There appears to be something problematic in your system or setup somewhere.

I did notice that NoScript strips off the trailing ".", taking me to http://to/ instead, but it's still the same page. The trailing "." does not appear to be necessary. http://to/ works in a profile without NoScript too.

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5
NoScript 1.9.9.18

@Giorgio:
WTF kind of domain name is "to" anyway. (I'll see if I can find out on my own in the meantime.)
Edit: Answer: It's a short domain name.
Although "nslookup to" returns "*** vnsc-pri-dsl.genuity.net can't find to: Non-existent domain",
"nslookup to." returns
Non-authoritative answer:
Name: to
Address: 216.74.32.103
It looks like the Kingdom of Tonga wants to be known for exporting shortened URLs on the Internet. It's a pretty short start.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5
User avatar
LouCypher
Posts: 9
Joined: Mon Nov 30, 2009 1:45 pm
Location: Jakarta, Indonesia (UTC+7)
Contact:

Re: [BUG] Can't open http://to./ if NoScript is enabled

Post by LouCypher »

Alan Baxter wrote:Does your problem persist if you Reset your NoScript settings?
Yes
Alan Baxter wrote:I did notice that NoScript strips off the trailing ".", taking me to http://to/ instead, but it's still the same page. The trailing "." does not appear to be necessary. http://to/ works in a profile without NoScript too.
It also happened to me on Firefox 3.6b4 (with NS enabled), but on 3.5.5 (with NS disabled, or else it won't work) http://to/ (without the dot) redirects to to.com. But it's not NS problem, we can skip this.
Alan Baxter wrote:There appears to be something problematic in your system or setup somewhere.
I'm afraid so, but why does it only work if NS is disabled?

p.s.
I don't use proxies
 
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5
Alan Baxter
Ambassador
Posts: 1586
Joined: Fri Mar 20, 2009 4:47 am
Location: Colorado, USA

Re: [BUG] Can't open http://to./ if NoScript is enabled

Post by Alan Baxter »

I don't know what else to suggest. Could you run through the other suggestions in the Standard Diagnostic?
http://kb.mozillazine.org/Standard_diagnostic_-_Firefox
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5
User avatar
GµårÐïåñ
Lieutenant Colonel
Posts: 3365
Joined: Fri Mar 20, 2009 5:19 am
Location: PST - USA
Contact:

Re: [BUG] Can't open http://to./ if NoScript is enabled

Post by GµårÐïåñ »

I am not having any problem with this and I have tried in on nearly 8 different configurations (including but not limited to different hardware, software, OS, versions, etc) so it suggests that it has something to do with YOUR specific configuration or installation. Have you tried the following:

1. Start using the ProfileManager ["C:\Program Files\Mozilla Firefox\firefox.exe" -profilemanager]

2. Create a new profile, name it whatever you want [NoScript Test]

3. Type the address and try without any extensions [http://to.]
? did it work?
?YES goto step 4
?NO then you have a problem that is beyond the application and probably has to do with your ISP gateway and how it is functioning, quasi proxy if you will and therefore not a NoScript issue, since it won't work without it either.

4. Don't configure anything, just install the latest NoScript version [latest development build]
? does it work?
?YES then no problems with NS, something has gotten messed up in your profile, repair it or start with a new one
?NO | But worked in step 3, then might be an extension conflict or something requiring further look
?NO | But didn't work in step 3 either, then again back to this not being an NS issue, your ISP gateway may be the problem, out of date DNS records, faulty DNS cache, who knows.
~.:[ Lï£ê ï§ å Lêmðñ åñÐ Ì Wåñ† M¥ Mðñê¥ ßå¢k ]:.~
________________ .: [ Major Mike's ] :. ________________
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5
User avatar
LouCypher
Posts: 9
Joined: Mon Nov 30, 2009 1:45 pm
Location: Jakarta, Indonesia (UTC+7)
Contact:

Re: [BUG] Can't open http://to./ if NoScript is enabled

Post by LouCypher »

1.. 2.. 3..
Read my previous post veeeeeery carefully

http://forums.informaction.com/viewtopi ... 272#p13657
myself wrote:Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (clean profile)
http://forums.informaction.com/viewtopi ... 272#p13660
myself wrote:It works in clean profile or safe mode

4... devel ...
http://noscript.net/getit#devel wrote:Latest development snapshot is identical to the official release above
i.e. 1.9.9.18
GµårÐïåñ wrote:...your ISP gateway may be the problem, out of date DNS records, faulty DNS cache, who knows.
If it's my ISP/DNS, it won't work even in new/clean profile or safe mode
http://forums.informaction.com/viewtopi ... 272#p13660
myself wrote:and other browsers
 
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5
User avatar
Giorgio Maone
Site Admin
Posts: 9454
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: [BUG] Can't open http://to./ if NoScript is enabled

Post by Giorgio Maone »

This looks like a difference in Gecko's full qualified domain name handling between 1.9.1 and 1.9.2.
Just turn the noscript.canonicalFQDN preference to false.
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)
User avatar
GµårÐïåñ
Lieutenant Colonel
Posts: 3365
Joined: Fri Mar 20, 2009 5:19 am
Location: PST - USA
Contact:

Re: [BUG] Can't open http://to./ if NoScript is enabled

Post by GµårÐïåñ »

LouCypher wrote:1.. 2.. 3..
Read my previous post veeeeeery carefully
I did and it is obviously working for everyone else but you. That suggests you didn't do something or do it the right way, regardless of how "VERY" carefully you stated it earlier. We are here to help you, if you don't want it, then by all means ignore and argue with us all, or you can do what you are told and see if it works like it does for everyone else. Now I am going to stop helping you and leave it to others who may be willing to spin their wheels with an uncooperative support request.
~.:[ Lï£ê ï§ å Lêmðñ åñÐ Ì Wåñ† M¥ Mðñê¥ ßå¢k ]:.~
________________ .: [ Major Mike's ] :. ________________
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5
User avatar
LouCypher
Posts: 9
Joined: Mon Nov 30, 2009 1:45 pm
Location: Jakarta, Indonesia (UTC+7)
Contact:

Re: [RESOLVED] Can't open http://to./ if NoScript is enabled

Post by LouCypher »

Giorgio Maone wrote:This looks like a difference in Gecko's full qualified domain name handling between 1.9.1 and 1.9.2.
Yes, because it works on Firefox 3.6 beta
Giorgio Maone wrote:Just turn the noscript.canonicalFQDN preference to false.
Set the noscript.canonicalFQDN to false works. Thanks, Giorgio.
This thread has been marked as resolved.
 
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5
al_9x
Master Bug Buster
Posts: 931
Joined: Thu Mar 19, 2009 4:52 pm

Re: [RESOLVED] Can't open http://to./ if NoScript is enabled

Post by al_9x »

On Windows, at least, if you have a dns suffix configured or dhcp assigned (example.com), and an app attempts to resolve a single label unqualified domain name (to), the dns client will append the suffix to it and try to resolve to.example.com, which will likely fail, causing Fx to either dns error or try to.com and other variations. To avoid this you have to qualify the domain with a trailing dot (to.)

When you navigate to http://to./ and canonicalFQDN is true, NS will strip the trailing dot. @Giorgio, what is the reason for the canonicalization of the host name? Why is it on by default?

After the dot is stripped, lookup of "to" will fail if the DNS Client service (dnscache) is off, resulting in behavior, the OP described. If dnscache is running, the lookup of "to" will succeed, because "to." has already been looked up and cached in the canonicalization step.
Last edited by al_9x on Wed Dec 02, 2009 6:36 pm, edited 1 time in total.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.20) Gecko/20081217 Firefox/2.0.0.20
User avatar
Giorgio Maone
Site Admin
Posts: 9454
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: [RESOLVED] Can't open http://to./ if NoScript is enabled

Post by Giorgio Maone »

al_9x wrote: what is the reason for the canonicalization of the host name? Why is it on by default?
It has been introduced long time ago in order to prevent XSS false positives due to the FQDN and the "normal" name being intermixed in the same page.
However, since then, XSS filtering has become much more specific, therefore it may make sense to turn it off by default in next release.
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)
Post Reply