[RESOLVED] website with no scripts, but no-script says false

[anvilsmithtech]

Hey all,

I am the webmaster for http://www.anvilsmithtech.com a small website for computer techs, I mention that since obviously security is important. I do not use any client side scripting, but I do use quite a bit of server-side scripting. As far as I knew the server-side scripting would not affect or be affected by no-script. Yet when I visit my site with no-script on it says that it has blocked a script.

Scripts Currently Forbidden | <SCRIPT>: 1 | <OBJECT>: 0

Is there anyway to find out what the script that is being blocked is so that I can revise the code accordingly? There doesn't seem to be any loss of functionality on the site, but it is the principle that I pride myself on having a client side scripting free website. Any help would be appreciated. Thanks

[Vordreller]

Just checked and I can indeed find no scripts.

Is your domain on your whitelist?

[Giorgio Maone]

That seems a bug, I'm investigating it.
Thanks for your report.

[Tom T.]

Hey all,

I am the webmaster for http://www.anvilsmithtech.com a small website for computer techs, I mention that since obviously security is important. I do not use any client side scripting, but I do use quite a bit of server-side scripting. As far as I knew the server-side scripting would not affect or be affected by no-script. Yet when I visit my site with no-script on it says that it has blocked a script.

Scripts Currently Forbidden | <SCRIPT>: 1 | <OBJECT>: 0

Is there anyway to find out what the script that is being blocked is so that I can revise the code accordingly? There doesn't seem to be any loss of functionality on the site, but it is the principle that I pride myself on having a client side scripting free website. Any help would be appreciated. Thanks

I just went there. NS logo mouseover now reads Scripts Currently Forbidden | <SCRIPT>: 0 | <OBJECT>: 0 ; however, menu shows a request: "Allow anvilsmithtech.com". Which, uh, sort of sounds like there's a client-side script trying to run. Allowing or temp-allowing turns the NS logo from red to blue and shows "Scripts Currently Allowed: 0 - 0" and offers to revoke or forbid. I don't know whether the bug is on your side or NS, but that's the status as of this moment, Hope it helps you and Giorgio figure it out.

[mmcspadden]

Thanks for checking it out guys. It now says that it has blocked 0 scripts, I can accept that just fine. Thanks to the author for a great plugin, and for checking it out for me.

[Giorgio Maone]

@mmcspadden:
Yes, I fixed that but with all this mess I forgot to mention your report in the changelog.
Done

[GµårÐïåñ]

I just went to your site and the status says Scripts: 0 - Objects: 0, so I am not sure. Do you have anything like ghostery or some other extension that injects gui Js on your machine? Because your site is coming up clean with me.

[Giorgio Maone]

@GµårÐïåñ:
it was a bug that I fixed in 1.9.2.5, see my post above.

[GµårÐïåñ]

Gotcha, that's why I didn't see it, because I was using your latest build, duh.