NoScript blocks elements on Space Weather Gallery

[Aimhere]

Hi,

I frequently visit the site http://spaceweathergallery.com, which has a gallery of user-submitted images of auroras, meteors, and the like. My problem is that the image thumbnails are supposed to have text overlays with the image title, poster, date, and location, but with NoScript installed, this information is not present.

I've allowed scripts from the site itself, as well as the third-party google code site it depends on, yet cannot get the text overlays to appear, and it's beginning to annoy me. NoScript is definitely at fault, as the text overlays appear if I disable NoScript and restart my browser. But I don't know which of the myriad options in NoScript are causing the issue.

Any ideas?

(P.S. - using most current NoScript release on Firefox 44.0, though the issue has been going on ever since I started visiting the Space Weather Gallery website many months ago.)

[barbaz]

third-party google code site it depends on

This is the problem. googlecode is a code repository (and will be shut down sometime soon), it is NOT meant for sites to just include files from it and this is what it's telling your browser, and NoScript's inclusion type checking filter is enforcing this. (the MIME type of the script(s) they're including is not a MIME type of Javascript)

The reason it's bad practice to include files directly from a repository in general is that you have no idea what the author(s) will commit, so you don't know if it will break stuff.

The fix is to contact the site, point them to this thread and tell them that googlecode is shutting down soon, and suggest they self-host the script(s).

[Thrawn]

The fix is to contact the site, point them to this thread and tell them that googlecode is shutting down soon, and suggest they self-host the script(s).

That is the Right Way for it to be fixed, yes.

There is a workaround to make NoScript ignore this bad behavior, but it is rather like deciding to regularly drink from a public pond: you really don't know what is in the water, or what will be there tomorrow.

[therube]

(
Just to note, Error Console:

Code: Select all

[NoScript] Blocking cross-site Javascript served from http://jqueryjs.googlecode.com/files/jquery-1.3.2.min.js with wrong type info text/x-c, attachment; filename="jquery-1.3.2.min.js" and included by http://spaceweathergallery.com/

)