[Resolved] Yahoo email Firefox temporary lockups
[Resolved] Yahoo email Firefox temporary lockups
When using NoScript while attempting to use Yahoo email through Firefox, I recently have started getting frequent temporary Firefox lockups. For example, if you click on email in your inbox, then you can't change Browser tabs for several seconds. Other email-related actions that I haven't written down also trigger the lockup. This happens even if I have NoScript set to "Allow scripts globally (dangerous)". However, if I disable NoScript entirely and start up Firefox, the lockups don't happen. Same issue on two separate PCs. I have yahoo.com and yimg.com allowed. Anything I can do to prevent this?
Mozilla/5.0 (Windows NT 5.1; rv:31.0) Gecko/20100101 Firefox/31.0
Re: Yahoo email Firefox temporary lockups
make sure you're using noscript latest development build
(it fixes a similar yahoo issue)
(it fixes a similar yahoo issue)
*Always* check the changelogs BEFORE updating that important software!
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:31.0) Gecko/20100101 SeaMonkey/2.28
Re: Yahoo email Firefox temporary lockups
I am using 2.6.8.36 (the latest development build at the moment) when I see the issue.
Mozilla/5.0 (Windows NT 5.1; rv:31.0) Gecko/20100101 Firefox/31.0
Re: Yahoo email Firefox temporary lockups
Hi Guest,
I am using NoScript 2.6.8.37rc2
barbaz is saying try the latest DEVELOPMENT version (AKA rc version).
From the change log (below) you can see, in NoScript 2.6.8.37rc1, that Giorgio Maone
has worked around the recent issues at Yahoo!
I think this will help you.
I use the rc versions.
Recent all builds from noscript.net
http://noscript.net/feed?c=200&t=a
I am using NoScript 2.6.8.37rc2
you are using the "latest stable version".Guest wrote: I am using 2.6.8.36 ...
barbaz is saying try the latest DEVELOPMENT version (AKA rc version).
From the change log (below) you can see, in NoScript 2.6.8.37rc1, that Giorgio Maone
has worked around the recent issues at Yahoo!
I think this will help you.
I use the rc versions.
Recent all builds from noscript.net
http://noscript.net/feed?c=200&t=a
DJ-LeithNoScript 2.6.8.37rc2
14 August 2014 23:12
x [XSS] Support for new insidious ES6 constructs introduced in Firefox 34
(thanks .mario for reporting)
x [HTTPS] Experimental "Allow HTTPS scripts globally on HTTPS documents"
mode
NoScript 2.6.8.37rc1
29 July 2014 22:42
x [Surrogate] Yahoo! "DARLA" ads loader post-execution surrogate prevents
the browser from stalling due to the many window.name-based XSSes
intentionally used by this ads delivery script
...
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:33.0) Gecko/20100101 Firefox/33.0
Re: Yahoo email Firefox temporary lockups
no.Guest wrote:I am using 2.6.8.36 (the latest development build at the moment)
latest dev build is 2.6.8.37rc2
http://noscript.net/feed?t=b
*Always* check the changelogs BEFORE updating that important software!
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:31.0) Gecko/20100101 SeaMonkey/2.28
Re: Yahoo email Firefox temporary lockups
Sorry, my mistake, I saw 2.6.8.36 mentioned on that page and didn't read far enough. Ok, I now have 2.6.8.3rc installed. However I do still seem to be getting lockups even with the release candidate version.
Other info that may or may not be of interest: I also have a Frontier.com email account (which uses Yahoo email in some way, both the Frontier and Yahoo logos are on it) in addition to regular Yahoo email, both accounts have the same issue. However, although the length and timing of the lockups seems somewhat random, on average it feels as though the Frontier Yahoo email lockups can be much longer than the ordinary Yahoo email lockups.
Other info that may or may not be of interest: I also have a Frontier.com email account (which uses Yahoo email in some way, both the Frontier and Yahoo logos are on it) in addition to regular Yahoo email, both accounts have the same issue. However, although the length and timing of the lockups seems somewhat random, on average it feels as though the Frontier Yahoo email lockups can be much longer than the ordinary Yahoo email lockups.
Mozilla/5.0 (Windows NT 5.1; rv:31.0) Gecko/20100101 Firefox/31.0
Re: Yahoo email Firefox temporary lockups
When it "locks up", any related messages in the Browser Console? (Ctrl-Shift-J)
*Always* check the changelogs BEFORE updating that important software!
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:31.0) Gecko/20100101 SeaMonkey/2.28
Re: Yahoo email Firefox temporary lockups
Here's what gets written to the browser consule during a test of my Frontier/Yahoo mail, clicking on an email then trying to click back and forth between two tabs, although I don't know what it means:
POST https://us-mg6.mail.yahoo.com/neo/logger [HTTP/1.1 200 OK 375ms]
GET https://sb.scorecardresearch.com/p [HTTP/1.1 200 OK 31ms]
GET https://us-mg6.mail.yahoo.com/neo/darla/php/fc.php [HTTP/1.1 200 OK 453ms]
GET https://csc.beap.bc.yahoo.com/yi [HTTP/1.1 200 OK 234ms]
GET https://ad.yieldmanager.com/csync [HTTP/1.1 500 Internal Server Error 437ms]
GET https://cdnk.interclick.com/beacon.gif [HTTP/1.1 200 OK 188ms]
GET https://csync.yahooapis.com/csync [HTTP/1.1 200 OK 297ms]
GET https://av.beap.bc.yahoo.com/av [HTTP/1.1 200 OK 344ms]
nsIJSON.decode is deprecated. Please use JSON.parse instead. noscriptService.js:3082
[NoScript InjectionChecker] HTML injection:
<html><head></head><body><script type="text/javascript">/* All portions of this software are copyright (c) 2003-2006 Right Media*/var rm_ban_flash=0;var rm_url="";var rm_pop_frequency=0;var rm_pop_id=0;var rm_pop_times=0;var rm_pop_nofreqcap=0;var rm_passback=0;var rm_tag_type="";var rm_md_purl_det=0;var rm_md_purl_dec=0;var rm_md_purl_st_ref=0;var rm_st_referrer="";var rm_md_purl_unknown=0;var rm_enable_ck_mp=0;var rm_ck_mp_cu="";rm_md_purl_det = "4"; rm_md_purl_dec = "3"; rm_md_purl_st_ref = "5"; rm_st_referrer = "http://us-mg6.mail.yahoo.com"; rm_md_purl_unknown = "0"; rm_enable_ck_mp = 1; rm_tag_type = "iframe"; rm_url = "https://ads.yahoo.com/imp?Z=160x600&cb= ... BLSxjdCQyN
[NoScript XSS]: sanitized window.name, "pos=SKY&id=tgtSKY&html=%253C%2521--%2520APT%2520Vendor%253A%2520Right%2520Media%252C%2520Format%253A%2520Standard%2520Graphical%2520--%253E%250A%253Chtml%253E%253Chead%253E%253C/head%253E%253Cbody%253E%253Cscript%2520type%253D%2522text/javascript%2522%253E/*%2520All%2520portions%2520of%2520this%2520software%2520are%2520copyright%2520%2528c%2529%25202003-2006%2520Right%2520Media*/var%2520rm_ban_flash%253D0%253Bvar%2520rm_url%253D%2522%2522%253Bvar%2520rm_pop_frequency%253D0%253Bvar%2520rm_pop_id%253D0%253Bvar%2520rm_pop_times%253D0%253Bvar%2520rm_pop_nofreqcap%253D0%253Bvar%2520rm_passback%253D0%253Bvar%2520rm_tag_type%253D%2522%2522%253Bvar%2520rm_md_purl_det%253D0%253Bvar%2520rm_md_purl_dec%253D0%253Bvar%2520rm_md_purl_st_ref%253D0%253Bvar%2520rm_st_referrer%253D%2522%2522%253Bvar%2520rm_md_purl_unknown%253D0%253Bvar%2520rm_enable_ck_mp%253D0%253Bvar%2520rm_ck_mp_cu%253D%2522%2522%253Brm_md_purl_det%2520%253D%2520%25224%2522%253B%2520rm_md_purl_
nsIJSON.decode is deprecated. Please use JSON.parse instead. noscriptService.js:3082
[NoScript InjectionChecker] HTML injection:
<html><head></head><body><script type="text/javascript">/* All portions of this software are copyright (c) 2003-2006 Right Media*/var rm_ban_flash=0;var rm_url="";var rm_pop_frequency=0;var rm_pop_id=0;var rm_pop_times=0;var rm_pop_nofreqcap=0;var rm_passback=0;var rm_tag_type="";var rm_md_purl_det=0;var rm_md_purl_dec=0;var rm_md_purl_st_ref=0;var rm_st_referrer="";var rm_md_purl_unknown=0;var rm_enable_ck_mp=0;var rm_ck_mp_cu="";rm_md_purl_det = "4"; rm_md_purl_dec = "3"; rm_md_purl_st_ref = "5"; rm_st_referrer = "http://us-mg6.mail.yahoo.com"; rm_md_purl_unknown = "0"; rm_enable_ck_mp = 1; rm_tag_type = "iframe"; rm_url = "https://ads.yahoo.com/imp?Z=120x45&cb=1 ... dCQyNSx5Yn
[NoScript XSS]: sanitized window.name, "pos=TL1&id=tgtTL1&html=%253C%2521--%2520APT%2520Vendor%253A%2520Right%2520Media%252C%2520Format%253A%2520Standard%2520Graphical%2520--%253E%250A%253Chtml%253E%253Chead%253E%253C/head%253E%253Cbody%253E%253Cscript%2520type%253D%2522text/javascript%2522%253E/*%2520All%2520portions%2520of%2520this%2520software%2520are%2520copyright%2520%2528c%2529%25202003-2006%2520Right%2520Media*/var%2520rm_ban_flash%253D0%253Bvar%2520rm_url%253D%2522%2522%253Bvar%2520rm_pop_frequency%253D0%253Bvar%2520rm_pop_id%253D0%253Bvar%2520rm_pop_times%253D0%253Bvar%2520rm_pop_nofreqcap%253D0%253Bvar%2520rm_passback%253D0%253Bvar%2520rm_tag_type%253D%2522%2522%253Bvar%2520rm_md_purl_det%253D0%253Bvar%2520rm_md_purl_dec%253D0%253Bvar%2520rm_md_purl_st_ref%253D0%253Bvar%2520rm_st_referrer%253D%2522%2522%253Bvar%2520rm_md_purl_unknown%253D0%253Bvar%2520rm_enable_ck_mp%253D0%253Bvar%2520rm_ck_mp_cu%253D%2522%2522%253Brm_md_purl_det%2520%253D%2520%25224%2522%253B%2520rm_md_purl_
POST https://us-mg6.mail.yahoo.com/stats/ymstat [HTTP/1.1 200 OK 282ms]
POST https://us-mg6.mail.yahoo.com/neo/logger [HTTP/1.1 200 OK 375ms]
GET https://sb.scorecardresearch.com/p [HTTP/1.1 200 OK 31ms]
GET https://us-mg6.mail.yahoo.com/neo/darla/php/fc.php [HTTP/1.1 200 OK 453ms]
GET https://csc.beap.bc.yahoo.com/yi [HTTP/1.1 200 OK 234ms]
GET https://ad.yieldmanager.com/csync [HTTP/1.1 500 Internal Server Error 437ms]
GET https://cdnk.interclick.com/beacon.gif [HTTP/1.1 200 OK 188ms]
GET https://csync.yahooapis.com/csync [HTTP/1.1 200 OK 297ms]
GET https://av.beap.bc.yahoo.com/av [HTTP/1.1 200 OK 344ms]
nsIJSON.decode is deprecated. Please use JSON.parse instead. noscriptService.js:3082
[NoScript InjectionChecker] HTML injection:
<html><head></head><body><script type="text/javascript">/* All portions of this software are copyright (c) 2003-2006 Right Media*/var rm_ban_flash=0;var rm_url="";var rm_pop_frequency=0;var rm_pop_id=0;var rm_pop_times=0;var rm_pop_nofreqcap=0;var rm_passback=0;var rm_tag_type="";var rm_md_purl_det=0;var rm_md_purl_dec=0;var rm_md_purl_st_ref=0;var rm_st_referrer="";var rm_md_purl_unknown=0;var rm_enable_ck_mp=0;var rm_ck_mp_cu="";rm_md_purl_det = "4"; rm_md_purl_dec = "3"; rm_md_purl_st_ref = "5"; rm_st_referrer = "http://us-mg6.mail.yahoo.com"; rm_md_purl_unknown = "0"; rm_enable_ck_mp = 1; rm_tag_type = "iframe"; rm_url = "https://ads.yahoo.com/imp?Z=160x600&cb= ... BLSxjdCQyN
[NoScript XSS]: sanitized window.name, "pos=SKY&id=tgtSKY&html=%253C%2521--%2520APT%2520Vendor%253A%2520Right%2520Media%252C%2520Format%253A%2520Standard%2520Graphical%2520--%253E%250A%253Chtml%253E%253Chead%253E%253C/head%253E%253Cbody%253E%253Cscript%2520type%253D%2522text/javascript%2522%253E/*%2520All%2520portions%2520of%2520this%2520software%2520are%2520copyright%2520%2528c%2529%25202003-2006%2520Right%2520Media*/var%2520rm_ban_flash%253D0%253Bvar%2520rm_url%253D%2522%2522%253Bvar%2520rm_pop_frequency%253D0%253Bvar%2520rm_pop_id%253D0%253Bvar%2520rm_pop_times%253D0%253Bvar%2520rm_pop_nofreqcap%253D0%253Bvar%2520rm_passback%253D0%253Bvar%2520rm_tag_type%253D%2522%2522%253Bvar%2520rm_md_purl_det%253D0%253Bvar%2520rm_md_purl_dec%253D0%253Bvar%2520rm_md_purl_st_ref%253D0%253Bvar%2520rm_st_referrer%253D%2522%2522%253Bvar%2520rm_md_purl_unknown%253D0%253Bvar%2520rm_enable_ck_mp%253D0%253Bvar%2520rm_ck_mp_cu%253D%2522%2522%253Brm_md_purl_det%2520%253D%2520%25224%2522%253B%2520rm_md_purl_
nsIJSON.decode is deprecated. Please use JSON.parse instead. noscriptService.js:3082
[NoScript InjectionChecker] HTML injection:
<html><head></head><body><script type="text/javascript">/* All portions of this software are copyright (c) 2003-2006 Right Media*/var rm_ban_flash=0;var rm_url="";var rm_pop_frequency=0;var rm_pop_id=0;var rm_pop_times=0;var rm_pop_nofreqcap=0;var rm_passback=0;var rm_tag_type="";var rm_md_purl_det=0;var rm_md_purl_dec=0;var rm_md_purl_st_ref=0;var rm_st_referrer="";var rm_md_purl_unknown=0;var rm_enable_ck_mp=0;var rm_ck_mp_cu="";rm_md_purl_det = "4"; rm_md_purl_dec = "3"; rm_md_purl_st_ref = "5"; rm_st_referrer = "http://us-mg6.mail.yahoo.com"; rm_md_purl_unknown = "0"; rm_enable_ck_mp = 1; rm_tag_type = "iframe"; rm_url = "https://ads.yahoo.com/imp?Z=120x45&cb=1 ... dCQyNSx5Yn
[NoScript XSS]: sanitized window.name, "pos=TL1&id=tgtTL1&html=%253C%2521--%2520APT%2520Vendor%253A%2520Right%2520Media%252C%2520Format%253A%2520Standard%2520Graphical%2520--%253E%250A%253Chtml%253E%253Chead%253E%253C/head%253E%253Cbody%253E%253Cscript%2520type%253D%2522text/javascript%2522%253E/*%2520All%2520portions%2520of%2520this%2520software%2520are%2520copyright%2520%2528c%2529%25202003-2006%2520Right%2520Media*/var%2520rm_ban_flash%253D0%253Bvar%2520rm_url%253D%2522%2522%253Bvar%2520rm_pop_frequency%253D0%253Bvar%2520rm_pop_id%253D0%253Bvar%2520rm_pop_times%253D0%253Bvar%2520rm_pop_nofreqcap%253D0%253Bvar%2520rm_passback%253D0%253Bvar%2520rm_tag_type%253D%2522%2522%253Bvar%2520rm_md_purl_det%253D0%253Bvar%2520rm_md_purl_dec%253D0%253Bvar%2520rm_md_purl_st_ref%253D0%253Bvar%2520rm_st_referrer%253D%2522%2522%253Bvar%2520rm_md_purl_unknown%253D0%253Bvar%2520rm_enable_ck_mp%253D0%253Bvar%2520rm_ck_mp_cu%253D%2522%2522%253Brm_md_purl_det%2520%253D%2520%25224%2522%253B%2520rm_md_purl_
POST https://us-mg6.mail.yahoo.com/stats/ymstat [HTTP/1.1 200 OK 282ms]
Mozilla/5.0 (Windows NT 5.1; rv:31.0) Gecko/20100101 Firefox/31.0
Re: Yahoo email Firefox temporary lockups
That sounds similar to the previous Yahoo performance issue, where they're using XSS to perform ad delivery, so the XSS filter has to go crazy checking all of their requests. Giorgio had to work around it; maybe an extra workaround is needed.
======
Thrawn
------------
Religion is not the opium of the masses. Daily life is the opium of the masses.
True religion, which dares to acknowledge death and challenge the way we live, is an attempt to wake up.
Thrawn
------------
Religion is not the opium of the masses. Daily life is the opium of the masses.
True religion, which dares to acknowledge death and challenge the way we live, is an attempt to wake up.
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:31.0) Gecko/20100101 Firefox/31.0
- Giorgio Maone
- Site Admin
- Posts: 9526
- Joined: Wed Mar 18, 2009 11:22 pm
- Location: Palermo - Italy
- Contact:
Re: Yahoo email Firefox temporary lockups
Please check latest development build 2.6.8.38rc1, thanks.
Mozilla/5.0 (Windows NT 6.3; WOW64; rv:31.0) Gecko/20100101 Firefox/31.0
Re: Yahoo email Firefox temporary lockups
Although it does seem to eliminate the delay on the things I can test so far such as clicking email then clicking a browser tab, 2.6.8.38 unfortunately seems to be preventing necessary email functionality from working; I can't compose email anymore (clicking "compose" does nothing at all, I don't see anything I can unblock either), if I check an email box and click on delete, that tab displays an envelope graphic with "1" superimposed over it and the entire web page (just within that tab, other tabs are fine) goes gray and locks up (I can still use that tab to go to other web pages, or get that one working again by going to it again via bookmark.).
Mozilla/5.0 (Windows NT 5.1; rv:31.0) Gecko/20100101 Firefox/31.0
- Giorgio Maone
- Site Admin
- Posts: 9526
- Joined: Wed Mar 18, 2009 11:22 pm
- Location: Palermo - Italy
- Contact:
Re: Yahoo email Firefox temporary lockups
Notice that security-related changes in browser standards may break this idiotic DARLA behavior in a (hopefully near) future, see my comment in the relevant Mozilla bug.
Anyway, please try latest development build 2.6.8.39rc1, thanks.
Anyway, please try latest development build 2.6.8.39rc1, thanks.
Mozilla/5.0 (Windows NT 6.3; WOW64; rv:31.0) Gecko/20100101 Firefox/31.0
Re: Yahoo email Firefox temporary lockups
The disabled functionality is back in 2.6.8.39rc1, but so are the lockups unfortunately.
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Firefox/31.0
Re: Yahoo email Firefox temporary lockups
The 2.6.8.39 public release seems to be working well, without the delays.
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Firefox/31.0