humblebundle.com and youtube.com IFRAME and flash fun

Ask for help about NoScript, no registration needed to post
bizaff
Posts: 5
Joined: Tue Jul 29, 2014 4:53 pm

humblebundle.com and youtube.com IFRAME and flash fun

Post by bizaff » Thu Aug 27, 2015 11:25 pm

So.

1. I go to humblebundle.com (no Blocked Objects yet) .
2. I click on one of the games, which brings up a youtube frame that noscript blocks. I have "Apply these restrictions to whitelisted sites too" and blocking everything.
3. I click on it, the page reloads, the frame goes away.
4. I click on the game again, THEN I get the youtube movie waiting to be played (allegedly).
5. I click on it, and it loads a THIRD blocked thing
6. I click on that, and I get the youtube movie waiting to be played, for real.
7. I click on it and it starts.

That's a lot of clicking.

After 2 I have a Blocked Object

Code: Select all

<IFRAME>@https://www.youtube.com/blahblahblah

After 5 I have another Blocked Object

Code: Select all

shockwave-flash@https://s.ytimg.com/yakyakyak


I figured fixing this would be pretty easy. I was wrong.

I tried fixing 2 by adding

Code: Select all

FRAME@https://www\.youtube\.com/
That didn't work.

I did some poking around and found https://forums.informaction.com/viewtopic.php?f=23&t=12897#p49589 - I interpret the advice there to add

Code: Select all

application/x-unknown <IFRAME>@https://www\.youtube\.com


That worked, but the space made me a bit suspicious. I changed it to

Code: Select all

application/x-unknown <IFRAME>@https://www\.mootube\.com
and it still allowed the frame. The space looks like it allows for all sites, which is NOT what I want.

Finally after mucking around for another 20 minutes

Code: Select all

FRAME@https://www\.youtube\.com
worked for 2. Why? It appears if the NoScript dialog is open, it doesn't bother reading from noscript.allowedMimeRegExp until it's closed.

Then I tried fixing 5. I added

Code: Select all

application/x-shockwave-flash@https://s\.ytimg\.com/
to noscript.allowedMimeRegExp which didn't work, then I tried

Code: Select all

application/shockwave-flash@https://s\.ytimg\.com/
which I wasn't expecting to work, and it didn't.

What am I missing here?
Mozilla/5.0 (Windows NT 6.3; WOW64; rv:40.0) Gecko/20100101 Firefox/40.0

barbaz
Senior Member
Posts: 9323
Joined: Sat Aug 03, 2013 5:45 pm

Re: humblebundle.com and youtube.com IFRAME and flash fun

Post by barbaz » Fri Aug 28, 2015 12:17 am

Are you missing anything? You got it working, no? I can try to expound on what I think is going on there but I'm still not understanding the problem.

bizaff wrote:I tried fixing 2 by adding

Code: Select all

FRAME@https://www\.youtube\.com/
That didn't work.

Because of the trailing / ? https://forums.informaction.com/viewtopic.php?f=7&t=17879

bizaff wrote:I did some poking around and found https://forums.informaction.com/viewtopic.php?f=23&t=12897#p49589 - I interpret the advice there to add

Code: Select all

application/x-unknown <IFRAME>@https://www\.youtube\.com


That worked, but the space made me a bit suspicious.

Good instinct. You are allowing MIME type "application/x-unknown" from all sites and MIME type "<IFRAME>" from https://www.youtube.com .

bizaff wrote:Finally after mucking around for another 20 minutes

Code: Select all

FRAME@https://www\.youtube\.com
worked for 2. Why?

See above.

bizaff wrote:Then I tried fixing 5. I added

Code: Select all

application/x-shockwave-flash@https://s\.ytimg\.com/
to noscript.allowedMimeRegExp which didn't work, then I tried

Code: Select all

application/shockwave-flash@https://s\.ytimg\.com/
which I wasn't expecting to work, and it didn't.

Again, try dropping the trailing / - see the above linked forum topic, allowedMimeRegExp works on sites (meaning, path isn't involved), *not* URLs. http://example.net is a site; http://example.net/ is a URL (example.net at path / ).
*Always* check the changelogs BEFORE updating that important software!
-

bizaff
Posts: 5
Joined: Tue Jul 29, 2014 4:53 pm

Re: humblebundle.com and youtube.com IFRAME and flash fun

Post by bizaff » Fri Aug 28, 2015 12:49 am

Bah, stupid sorta regular expressions. I play with regex URL, I expect trailing slash. I move to silently ignore trailing slash.. seconds?

My claim of the Options Dialog being open is probably wrong.

Striking the trailing slash was it, thanks for the review.
Mozilla/5.0 (Windows NT 6.3; WOW64; rv:40.0) Gecko/20100101 Firefox/40.0

barbaz
Senior Member
Posts: 9323
Joined: Sat Aug 03, 2013 5:45 pm

Re: humblebundle.com and youtube.com IFRAME and flash fun

Post by barbaz » Fri Aug 28, 2015 1:17 am

That Guest post was from bizaff so I've changed authorship.
@bizaff, remember to log in (if possible) so that you don't need to solve the CAPTCHA every time & to make it easier to keep track of who's who in a thread.

And you're welcome, glad that post was helpful. :)
*Always* check the changelogs BEFORE updating that important software!
-

Post Reply