[FIXED] Links on MSN.COM no longer work

[K-Dee]

Sometime this morning (after I restarted Firefox) none of the link on www.msn.com work. They start to load but then show the following

---------------
This page is not available right now

We're working to restore it as soon as possible. Please check back soon.

Click here to try this page again, or visit: http://www.msn.com
Ref 1: 06164d206ca14936a856638c6fa75f69 Ref 2: 000000 Ref 3: Wed Mar 16 2016 16:22:04 GMT-0600 (Mountain Standard Time)
---------------

If I uninstall or disable NoScript the problem goes away.....

Using Firefox ESR v38.7 on Win7/x64

[barbaz]

Are all scripts Allowed? If so, when this issue occurs, do you see anything related in the Browser Console? (Ctrl-Shift-J)
(if you don't know what's related, turn off CSS warnings and post everything else you see)

If all scripts are not Allowed, does doing so let it work? If it does, which additional script sources needed Allowed?

[edwartr]

I have tried this with all scripts allowed temporarily, all allowed permanently, none and it doesn't matter I get this response on the webpage:

This page is not available right now

We're working to restore it as soon as possible. Please check back soon.

Click here to try this page again, or visit: http://www.msn.com
Ref 1: ae9eca849b1344ac8c75c2f900996a5c Ref 2: 000000 Ref 3: Wed Mar 16 2016 20:30:07 GMT-0500 (Central Standard Time)

However, if I disable NoScript completely and try the links from the MSN.com page, they all work just fine.

This just happened after the latest update for NoScript OR some other time today. I do not if the links worked after the latest NoScript update but I can say that the links worked for sure 1st thing this morning for me.

[barbaz]

when this issue occurs, do you see anything related in the Browser Console? (Ctrl-Shift-J)
(if you don't know what's related, turn off CSS warnings and post everything else you see)

[therube]

What version of NoScript?

[edwartr]

2.9.0.5

When I try to follow a link from msn.com, I get the previously posted error and the console shows this:

uncaught exception: 2147500034 <unknown>
Loading mixed (insecure) display content "http://img-s-msn-com.akamaized.net/tena ... &w=40&h=40" on a secure page[Learn More] www.msn.com
Loading mixed (insecure) display content "http://img-s-msn-com.akamaized.net/tena ... &w=40&h=40" on a secure page[Learn More] www.msn.com
img-s-msn-com.akamaized.net : server does not support RFC 5746, see CVE-2009-3555 <unknown>
static-hp-sus-s-msn-com.akamaized.net : server does not support RFC 5746, see CVE-2009-3555 <unknown>
TypeError: longurlplease.shortUrlRegexp is null longurlplease.js:49:28
TypeError: longurlplease.shortUrlRegexp is null longurlplease.js:49:28
{"[meModule] service error: \"meBingRewards\" call failed with status of \"error\", get bing rewards AJAX Fail":5362,"w3c":{"unloadEvent":[0,0],"redirect":[0,0],"fetch":[1067,-1],"domainLookup":[1071,1071],"connect":[1071,1096],"request":[1166,-1],"response":[1450,1486],"domLoading":1808,"domInteractive":3875,"domContentLoadedEvent":[3940,3976],"domComplete":4640,"loadEvent":[4640,4642]}} www.msn.com:11:25722

img.s-msn.com : server does not support RFC 5746, see CVE-2009-3555 <unknown>
TypeError: longurlplease.shortUrlRegexp is null longurlplease.js:49:28
TypeError: this._recipeManager is null LoginManagerParent.jsm:185:9
TypeError: longurlplease.shortUrlRegexp is null longurlplease.js:49:28
mutating the [[Prototype]] of an object will cause your code to run very slowly; instead create the object with the correct initial [[Prototype]] value using Object.create sync.js:112:5
TypeError: longurlplease.shortUrlRegexp is null longurlplease.js:49:28
TypeError: longurlplease.shortUrlRegexp is null longurlplease.js:49:28
TypeError: longurlplease.shortUrlRegexp is null longurlplease.js:49:28
TypeError: longurlplease.shortUrlRegexp is null longurlplease.js:49:28
TypeError: longurlplease.shortUrlRegexp is null longurlplease.js:49:28
Key event not available on some keyboard layouts: key="c" modifiers="accel,alt" browser.xul
Key event not available on some keyboard layouts: key="i" modifiers="accel,alt,shift" browser.xul
static-finance-eus.s-msn.com:443 uses an invalid security certificate.

The certificate is only valid for the following names:
a248.e.akamai.net, *.akamaihd.net, *.akamaihd-staging.net, *.akamaized.net, *.akamaized-staging.net

Error code: <a id="errorCode" title="SSL_ERROR_BAD_CERT_DOMAIN">SSL_ERROR_BAD_CERT_DOMAIN</a>
<unknown>
TypeError: longurlplease.shortUrlRegexp is null longurlplease.js:49:28
static-entertainment-eus.s-msn.com:443 uses an invalid security certificate.

The certificate is only valid for the following names:
a248.e.akamai.net, *.akamaihd.net, *.akamaihd-staging.net, *.akamaized.net, *.akamaized-staging.net

Error code: <a id="errorCode" title="SSL_ERROR_BAD_CERT_DOMAIN">SSL_ERROR_BAD_CERT_DOMAIN</a>
<unknown>
TypeError: longurlplease.shortUrlRegexp is null

[barbaz]

Nothing there relates to NoScript, as far as I can tell.

Does disabling all extensions other than NoScript get it working? (Tools > Add-ons Manager)

[Vic]

I am having the exact same problem and disabling all other Add-ons does not work. I have to completely disable NoScript in the Add-ons Manager to get the pages to load.

However I did find that forbidding msn.com makes the "page unavailable" message go away but the site becomes mostly unusable because of this.

On a computer that's had the browser open for several days (my mom never closes her dang browser) the problem isn't present, probably because it hasn't had the chance to update NoScript.

[barbaz]

Does NoScript 2.9.0.5rc2 work?

Does NoScript 2.9.0.4 work?

Old NoScript @
https://addons.mozilla.org/addon/noscript/versions
*or*
https://noscript.net/feed?c=100&t=a

[therube]

2.9.0.5

Code: Select all

This page is not available right now

We're working to restore it as soon as possible. Please check back soon.

Click here to try this page again, or visit: http://www.msn.com
Ref 1: c24dbe9e773b454d952c343a38b61f45   Ref 2: 000000   Ref 3: Thu Mar 17 2016 20:41:05 GMT-0400 (Eastern Standard Time)

Code: Select all

[NoScript HTTPS] Redirected Channel https://www.msn.com/en-us/health/medical/9-signs-you-should-fire-your-doctor/ar-BBqAhRS?li=BBnb4R7

This is is the source:

Code: Select all

...{var i=e.html("http://"+u.location.host),n=e.url(u.location.href);n.indexOf("https://")==0&&(n=n.replace("https://","http://"));u.getElementsByTagName("body")[0].innerHTML="<style>body{font-family:Arial;margin-left:40px}img{border:0 none}#content{margin-left:auto;margin-right:auto}#message h2{font-size:20px;font-weight:normal;color:#000;margin:34px 0 0 0}#message p{font-size:13px;color:#000;margin:7px 0 0 0}#errorref{font-size:11px;color:#737373;margin-top:41px}<\/style><div id='content'><div id='message'><h2>This page is not available right now<\/h2><p>We're working to restore it as soon as possible. Please check back soon.<br/><br/><a href=\""+e.html(n)+'">Click here<\/a> to try this page again, or visit:...

2.9.0.4 works.

[Kpral]

I had noticed earlier this week that my Firefox and Noscript started showing the same behavior. I tried disabling all addons except noscript, tried with all addons disabled, then was finally able to getting it working again by disabling noscript. I realized it had updated to a the most recent development build over the weekend (not sure how I got on that). Uninstalled and installed 2.9.0.4 and it went back to working as normal. Now 2.9.0.5 is out and apparently the bug that was in the development build never got caught. Console shows the same as someone posted above, but it's definitely related to NoScript 2.9.0.5 and allowing scripts globally still doesn't allow the pages to load.

[Kpral]

Oh! I forgot to also clarify that the initial page at http://www.msn.com or https://www.msn.com will load properly, just any articles linked from it will not load.

[edwartr]

I can confirm that this is only with 2.9.0.5 - when I go back and reload 2.9.0.4 all links on msn.com start working again. (and to confirm, noscript is the only add-on that causes this)

Thanks for you guys working on this. If you need me to do any more testing / longs, etc. just let me know.

[ArgosDex]

Same problem here, tried rolling back to 2.9.0.5rc4 without success. On the outside chance it could be OS dependent, it's not does the same thing on Linux Mint 17.3 Rosa.

[gfhasman]

I rolled back to 2.9.0.4 and everything on msn.com now works fine. I tried all the "newer" versions and they break the msn.com links!