better indication for iframes in the blocked objects menu

Bug reports and enhancement requests
Post Reply
al_9x
Master Bug Buster
Posts: 931
Joined: Thu Mar 19, 2009 4:52 pm

better indication for iframes in the blocked objects menu

Post by al_9x » Tue Jan 04, 2011 2:58 am

Iframes are currently sometimes listed with a generic icon and a text unknown@site, and only the tooltip reveals that it's an iframe. That it's a blocked iframe is more valuable information than its unknown mime. Both the icon and the text should clearly indicate that its an iframe.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13

User avatar
Giorgio Maone
Site Admin
Posts: 8829
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: better indication for iframes in the blocked objects men

Post by Giorgio Maone » Wed Jan 19, 2011 12:41 am

It's not always a easy info to retrieve, but I'll see what can be done.
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13

al_9x
Master Bug Buster
Posts: 931
Joined: Thu Mar 19, 2009 4:52 pm

Re: better indication for iframes in the blocked objects men

Post by al_9x » Wed Jan 19, 2011 1:37 am

Giorgio Maone wrote:It's not always a easy info to retrieve, but I'll see what can be done.


I am not sure what you mean, the tooltip shows that it's an iframe, so all the info is there, it's only a question of presentation. What I am suggesting is: that it's a blocked iframe, is the useful information, the mime (which I think would always be unknown) is irrelevant.

"<IFRAME>@site" with a memorable iframe icon is considerably more useful (for quickly taking in the status of the page) than "unknown@site" with a generic icon.

One related question. In some cases (e.g. new yahoo mail beta) a blocked iframe is shown as "text/html@host," since it's blocked how/why do you get the mime?
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13

User avatar
Giorgio Maone
Site Admin
Posts: 8829
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: better indication for iframes in the blocked objects men

Post by Giorgio Maone » Sat Jan 29, 2011 3:41 pm

al_9x wrote:
Giorgio Maone wrote:It's not always a easy info to retrieve, but I'll see what can be done.


I am not sure what you mean, the tooltip shows that it's an iframe, so all the info is there, it's only a question of presentation. What I am suggesting is: that it's a blocked iframe, is the useful information, the mime (which I think would always be unknown) is irrelevant.

"<IFRAME>@site" with a memorable iframe icon is considerably more useful (for quickly taking in the status of the page) than "unknown@site" with a generic icon.

I agree.

al_9x wrote:One related question. In some cases (e.g. new yahoo mail beta) a blocked iframe is shown as "text/html@host," since it's blocked how/why do you get the mime?


I couldn't reproduce on Yahoo! Mail, hence my answer is tentative, but the following markup obviously causes text/html@host to be displayed:

Code: Select all

<object data="http://noscript.net" type="text/html" width="400" height="400"></object>
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13

al_9x
Master Bug Buster
Posts: 931
Joined: Thu Mar 19, 2009 4:52 pm

Re: better indication for iframes in the blocked objects men

Post by al_9x » Sat Jan 29, 2011 7:11 pm

Giorgio Maone wrote:I couldn't reproduce on Yahoo! Mail, hence my answer is tentative, but the following markup obviously causes text/html@host to be displayed:

Code: Select all

<object data="http://noscript.net" type="text/html" width="400" height="400"></object>

Such an object has an object tooltip, I am referring specifically to iframes shown with a known mime, which I encounter regularly, here is one:

Fx 3.6.13, NS 2.0.9.7rc4, new profile, forbid iframes

On https://mail.yahoo.com/ there is an iframe. AFAICT its mime is neither in the html nor is it it sniffed (which is good, it shouldn't be), yet it's shown as text/html in blocked objects. I can post other examples as I encounter them.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13

User avatar
Giorgio Maone
Site Admin
Posts: 8829
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: better indication for iframes in the blocked objects men

Post by Giorgio Maone » Sat Jan 29, 2011 9:37 pm

al_9x wrote:On https://mail.yahoo.com/ there is an iframe. AFAICT its mime is neither in the html nor is it it sniffed (which is good, it shouldn't be), yet it's shown as text/html in blocked objects. I can post other examples as I encounter them.


Firefox "guesses" the mime type when possible by looking up a file extension mapping (in this case .html maps to text/html, obviously).
Of course, if you allow the frame and it's found to actually be plugin content according to its true HTTP headers, notwithstanding the extension, NoScript will detect this and interrupt the load anyway before it gets processed.
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13

al_9x
Master Bug Buster
Posts: 931
Joined: Thu Mar 19, 2009 4:52 pm

Re: better indication for iframes in the blocked objects men

Post by al_9x » Sat Jan 29, 2011 11:02 pm

Giorgio Maone wrote:
al_9x wrote:On https://mail.yahoo.com/ there is an iframe. AFAICT its mime is neither in the html nor is it it sniffed (which is good, it shouldn't be), yet it's shown as text/html in blocked objects. I can post other examples as I encounter them.


Firefox "guesses" the mime type when possible by looking up a file extension mapping (in this case .html maps to text/html, obviously).
Of course, if you allow the frame and it's found to actually be plugin content according to its true HTTP headers, notwithstanding the extension, NoScript will detect this and interrupt the load anyway before it gets processed.


I think it would better, for all blocked iframes (regardless of guessing, not just unknown), to show the same <IFRAME>@site with the same icon. The guessed mime you can then stick in the tooltip, if at all.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13

User avatar
Giorgio Maone
Site Admin
Posts: 8829
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: better indication for iframes in the blocked objects men

Post by Giorgio Maone » Sun Jan 30, 2011 9:23 am

al_9x wrote:I think it would better, for all blocked iframes (regardless of guessing, not just unknown), to show the same <IFRAME>@site with the same icon. The guessed mime you can then stick in the tooltip, if at all.

<IFRAME> label, OK, same icon, not so. I think one more hint is better than nothing.
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13

al_9x
Master Bug Buster
Posts: 931
Joined: Thu Mar 19, 2009 4:52 pm

Re: better indication for iframes in the blocked objects men

Post by al_9x » Sun Nov 10, 2013 8:32 pm

currently the menu entry for the specific blocked iframe shows "<IFRAME>@" but the corresponding entry for "embedding (embedder)" shows "unknown@", it should be <IFRAME> too. Having a different type@ suggests that the entries are not for the same entity.

Also, the icon for both appears to be one for an unknown mime rather than an iframe. If that is an iframe icon, never mind, but if not, something more iframy would be better.
Mozilla/5.0 (Windows NT 5.1; rv:24.0) Gecko/20100101 Firefox/24.0

Post Reply