Firefox freezes when loading most pages on The Guardian

Ask for help about NoScript, no registration needed to post

Re: Firefox freezes when loading most pages on The Guardian

Postby barbaz » Mon Jul 17, 2017 2:50 am

ginahoy wrote:Ok, just so I understand... doesn't NS block scripts from domains that I forbid?

Yes, it does, but only the scripts. The XSS exception applies to ALL resources.

Since allowing this XSS is very unsafe, ALL requests covered by the exception must be blocked.

This is why even if you Forbid bluekai and googlesyndication, it is still prudent to use the ABE rule.
*Always* check the changelogs BEFORE updating that important software!
Board search is currently partially broken: https://forums.informaction.com/viewtopic.php?f=14&t=21752
Workaround: use your favorite search engine, add site:forums.informaction.com to your query
-
barbaz
Senior Member
 
Posts: 7735
Joined: Sat Aug 03, 2013 5:45 pm

Re: Firefox freezes when loading most pages on The Guardian

Postby ginahoy » Thu Aug 03, 2017 6:57 am

Coincidentally, since implementing the previously recommended XSS exceptions and ABE rules, I've been experiencing XSS warnings on more sites. Here are a couple of examples where I have to repeatedly dismiss XSS warnings:

https://sites.google.com/site/easylinuxtipsproject/mint-xfce
http://sysopt.com/showthread.php?209341-looking-for-chkdsk-log-file (drilling down to any individual discussion triggers XSS warning)

Rather than prescribing a fix, it would be helpful if someone could explain how to work out the XSS exceptions and ABE rules so I don't have to keep coming back here for assistance.
Mozilla/5.0 (Windows NT 5.1; rv:51.0) Gecko/20100101 Firefox/51.0
ginahoy
Senior Member
 
Posts: 50
Joined: Tue Feb 07, 2012 6:32 pm

Re: Firefox freezes when loading most pages on The Guardian

Postby barbaz » Thu Aug 03, 2017 4:45 pm

Please check the Browser Console (Ctrl-Shift-J) when this issue happens and post here any messages related to NoScript.
(related messages usually start with either "[NoScript" or "[ABE]"; if you don't know what's related, turn off CSS warnings and post everything else you see)
*Always* check the changelogs BEFORE updating that important software!
Board search is currently partially broken: https://forums.informaction.com/viewtopic.php?f=14&t=21752
Workaround: use your favorite search engine, add site:forums.informaction.com to your query
-
barbaz
Senior Member
 
Posts: 7735
Joined: Sat Aug 03, 2013 5:45 pm

Re: Firefox freezes when loading most pages on The Guardian

Postby ginahoy » Thu Aug 03, 2017 6:45 pm

Because the NoScript XSS warning specifies 'details are logged to the console', naturally I had checked and didn't see anything related to NS/ABE. Here are the console entries for the two sites. I turned off Logging and CSS. The first site had a bunch of JS warnings (forbidden header) so I also unchecked JS warnings. And I expanded JS errors in case that's relevant:

https://sites.google.com/site/easylinuxtipsproject/first-mint-xfce
Code: Select all
SyntaxError: 'a[name=TOC-TEN-ESSENTIAL-ACTIONS:]' is not a valid selector  jot_min_view__en.js:439
   t.bv https://ssl.gstatic.com/sites/p/568a6b/system/js/jot_min_view__en.js:439:225
   t.tw https://ssl.gstatic.com/sites/p/568a6b/system/js/jot_min_view__en.js:439:138
   t.uw https://ssl.gstatic.com/sites/p/568a6b/system/js/jot_min_view__en.js:438:767
   <anonymous> https://ssl.gstatic.com/sites/p/568a6b/system/js/jot_min_view__en.js:438:614
   window.JOT_postEvent https://sites.google.com/site/easylinuxtipsproject/first-mint-xfce:12:276
   <anonymous> https://sites.google.com/site/easylinuxtipsproject/first-mint-xfce:1173:7
   <anonymous> https://sites.google.com/site/easylinuxtipsproject/first-mint-xfce:1165:6
Error: Bad hint: invalid_prefix  proxy.html:3:1224
   N https://content.googleapis.com/static/proxy.html:3:1224
   ka https://content.googleapis.com/static/proxy.html:5:194
   la https://content.googleapis.com/static/proxy.html:3:1920
   L.m https://content.googleapis.com/static/proxy.html:6:350
   ja https://content.googleapis.com/static/proxy.html:3:1708
   Y https://content.googleapis.com/static/proxy.html:11:55
   Z https://content.googleapis.com/static/proxy.html:9:176
   A.load/< https://content.googleapis.com/static/proxy.html:11:419
   X https://content.googleapis.com/static/proxy.html:11:339
   A.load https://content.googleapis.com/static/proxy.html:11:399
   <anonymous> https://content.googleapis.com/static/proxy.html:12:1

http://www.sysopt.com/showthread.php?209341-looking-for-chkdsk-log-file (I only expanded the last JS error, the others are similar)
Code: Select all
TypeError: googletag.defineOutOfPageSlot is not a function[Learn More]  showthread.php:118:15
TypeError: googletag.display is not a function[Learn More]  showthread.php:221:9
Password fields present on an insecure (http://) page. This is a security risk that allows user login credentials to be stolen.[Learn More]  showthread.php
TypeError: googletag.display is not a function[Learn More]  showthread.php:2261:9
TypeError: googletag.display is not a function[Learn More]  showthread.php:2272:9
TypeError: googletag.display is not a function[Learn More]  showthread.php:2322:9
TypeError: googletag.display is not a function[Learn More]  showthread.php:2390:9
   <anonymous> http://www.sysopt.com/showthread.php:2390:9
   <anonymous> http://www.sysopt.com/showthread.php:2386:2
Mozilla/5.0 (Windows NT 5.1; rv:51.0) Gecko/20100101 Firefox/51.0
ginahoy
Senior Member
 
Posts: 50
Joined: Tue Feb 07, 2012 6:32 pm

Re: Firefox freezes when loading most pages on The Guardian

Postby barbaz » Thu Aug 03, 2017 6:59 pm

Nothing obviously XSS related in the console messages, and not seeing any XSS problems here. On sysopt, what script permissions do you have?
(Right-click the NoScript Options menu item to copy the full script listing, then paste here with Ctrl-V.)
*Always* check the changelogs BEFORE updating that important software!
Board search is currently partially broken: https://forums.informaction.com/viewtopic.php?f=14&t=21752
Workaround: use your favorite search engine, add site:forums.informaction.com to your query
-
barbaz
Senior Member
 
Posts: 7735
Joined: Sat Aug 03, 2013 5:45 pm

Re: Firefox freezes when loading most pages on The Guardian

Postby ginahoy » Thu Aug 03, 2017 8:19 pm

This doesn't make sense. I've been on these 2 sites at least a half-dozen times in the past several days and consistently got XSS warnings. In the case of sysop forum, I confirmed it didn't matter if I was signed in or not (although warnings only ocurr at the topic level). Now, neither site generates a warning!! And I didn't make any changes to NS settings or permissions since my previous message. I'll wait to post noscript permissions when XSS warnings recur since additional scripts may be running that are associated with XSS attempts.

BTW, I can't figure out how to do a text-copy from the NS menu. Otherwise I can upload a screenshot to my server since this forum doesn't support attachments or image pasting.
Mozilla/5.0 (Windows NT 5.1; rv:51.0) Gecko/20100101 Firefox/51.0
ginahoy
Senior Member
 
Posts: 50
Joined: Tue Feb 07, 2012 6:32 pm

Re: Firefox freezes when loading most pages on The Guardian

Postby barbaz » Thu Aug 03, 2017 8:25 pm

ginahoy wrote:BTW, I can't figure out how to do a text-copy from the NS menu.

Like this -
barbaz wrote:Right-click the NoScript Options menu item to copy the full script listing,

There isn't any feedback when it's copied. Maybe that's what's confusing you?
*Always* check the changelogs BEFORE updating that important software!
Board search is currently partially broken: https://forums.informaction.com/viewtopic.php?f=14&t=21752
Workaround: use your favorite search engine, add site:forums.informaction.com to your query
-
barbaz
Senior Member
 
Posts: 7735
Joined: Sat Aug 03, 2013 5:45 pm

Re: Firefox freezes when loading most pages on The Guardian

Postby ginahoy » Thu Sep 21, 2017 9:59 pm

Although I may circle back to the XSS warnings (re: the last several posts), I wanted to update this thread on the original topic.

As noted in previous comments, the June 30 development release and ABE/XSS tweaks suggested by Barbaz seemed to improve performance on sites like tripadvisor. I attributed any further freeze-ups to my computer, which is getting rather long in the tooth (circa 2008 machine running XP).

I recently built a new Linux machine (7700K CPU with 32GB RAM, FF v54) and to my utter shock and amazement, tripadvisor is locking up FF on that machine! Pages load in what I would call 'fits and starts'. It takes about two minutes to finish loading a page with hotel listings for a random city. During that time, I'm only able to gain focus for intervals of a split second between long periods where the browser is frozen. Interestingly, the CPU is not active during those intervals so this is clearly not a resource issue. Once I disable NS, the same page always loads super fast.

Below is the readout from NS's flyout. My initial thought was that one of the blocked sites could be causing an active script to time out, with multiple retries. However, I tried temporarily allowing all seven blocked sites, and lock-up behavior was the same!

Code: Select all
+tripadvisor.com
+bing.com
+facebook.net
+pinimg.com
+tacdn.com
+googletagservices.com
!tamgrt.com
!googleadservices.com
!criteo.net
!doubleclick.net
!scorecardresearch.com
!mathtag.com
!smartertravel.com
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:54.0) Gecko/20100101 Firefox/54.0
ginahoy
Senior Member
 
Posts: 50
Joined: Tue Feb 07, 2012 6:32 pm

Re: Firefox freezes when loading most pages on The Guardian

Postby barbaz » Fri Sep 22, 2017 1:02 am

*Always* check the changelogs BEFORE updating that important software!
Board search is currently partially broken: https://forums.informaction.com/viewtopic.php?f=14&t=21752
Workaround: use your favorite search engine, add site:forums.informaction.com to your query
-
barbaz
Senior Member
 
Posts: 7735
Joined: Sat Aug 03, 2013 5:45 pm

Re: Firefox freezes when loading most pages on The Guardian

Postby ginahoy » Fri Sep 22, 2017 6:09 am

Excellent! Finally I can visit tripadvisor without first unloading NS! I see from the other thread I could have accomplished the same by temporarily disabling XSS. If this is eventually resolved in a new version, please post an update here so those following this thread can remove XSS exceptions.

BTW, I had to add the Deny INC tweak (as per your July 12 post) to avoid the XSS garbage on eBay and other sites.

Thank you.
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:54.0) Gecko/20100101 Firefox/54.0
ginahoy
Senior Member
 
Posts: 50
Joined: Tue Feb 07, 2012 6:32 pm

Re: Firefox freezes when loading

Postby vmac » Tue Oct 03, 2017 4:02 pm

Here we are again - but with a new website: http://www.saturn.de/
CPU is high, FF is blocked
Mozilla/5.0 (Windows NT 6.3; WOW64; rv:56.0) Gecko/20100101 Firefox/56.0
vmac
 
Posts: 17
Joined: Sat Jun 03, 2017 11:49 am

Re: Firefox freezes when loading most pages on The Guardian

Postby barbaz » Tue Oct 03, 2017 4:25 pm

vmac wrote:Here we are again - but with a new website: http://www.saturn.de/
CPU is high, FF is blocked

Not seeing that here. I tested in a clean profile with NoScript 5.1.2rc1 & Scripts Globally Allowed, and I only get a very brief lag.

What happens if you Mark facebook.net as Untrusted?

One other thing. The console messages showed NoScript XSS filter active, but there were no Injection Checker messages or similar specifying what exactly was detected as a XSS attempt.
Code: Select all
[NoScript XSS] Sanitized suspicious request. Original URL [https://6810627.fls.doubleclick.net/activityi;src=6810627;type=homep0;cat=samsu0;u1=DESKTOP;u3=;u4=SAMSUNG%7CSAMSUNG%7CAPPLE%7CSAMSUNG%7CSONY%7CLENOVO%7CK%C3%84FER%7CSAMSUNG;u5=SAMSUNG%20Galaxy%20S8%2C%20Smartphone%2C%2064%20GB%2C%205.8%20Zoll%2C%20Midnight%20Black%2C%20LTE%7CSAMSUNG%20Galaxy%20S8%2C%20Smartphone%2C%2064%20GB%2C%205.8%20Zoll%2C%20Arctic%20Silver%2C%20LTE%7CAPPLE%20iPhone%206%2C%20Smartphone%2C%2032%20GB%2C%204.7%20Zoll%2C%20Spacegrau%2C%20LTE%7CSAMSUNG%20Galaxy%20S8%2C%20Smartphone%2C%2064%20GB%2C%205.8%20Zoll%2C%20Orchid%20Grey%2C%20LTE%7CSONY%20PlayStation%204%201%20TB%20Schwarz%20%2B%20FIFA%2018%20%2B%202.%20DualShock4%20Controller%20%2B%20PS%20Plus%2014%20Tage%7CLENOVO%20C2%2C%20Smartphone%2C%208%20GB%2C%205.0%20Zoll%2C%20Schwarz%2C%20LTE%7CK%C3%84FER%20305016%20Caffe%20Espresso%2C%20Kaffeebohnen%7CSAMSUNG%20Galaxy%20J3%20(2017)%20Duos%2C%20Smartphone%2C%2016%20GB%2C%205%20Zoll%2C%20Schwarz%2C%20LTE;u6=2246306%7C2246307%7C2249741%7C2246308%7C2324918%7C2180274%7C1358723%7C2292599;u7=Handy%20%26%20Smartphone%20ohne%20Vertrag%7CHandy%20%26%20Smartphone%20ohne%20Vertrag%7CHandy%20%26%20Smartphone%20ohne%20Vertrag%7CHandy%20%26%20Smartphone%20ohne%20Vertrag%7CPlayStation%204%7CHandy%20%26%20Smartphone%20ohne%20Vertrag%7CKaffee%20%2B%20Tee%7CHandy%20%26%20Smartphone%20ohne%20Vertrag;u8=Smartphones%7CSmartphones%7CSmartphones%7CSmartphones%7CPS4%20Konsolen%7CSmartphones%7CKaffee%7CSmartphones;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=2110374163718.9888?] requested from [http://www.saturn.de/]. Sanitized URL: [https://6810627.fls.doubleclick.net/#3667527244672981962].
[NoScript XSS] Sanitized suspicious request. Original URL [https://6810627.fls.doubleclick.net/activityi;src=6810627;type=homep0;cat=samsu0;u1=DESKTOP;u3=;u4=SAMSUNG%7CSAMSUNG%7CAPPLE%7CSAMSUNG%7CSONY%7CLENOVO%7CK%C3%84FER%7CSAMSUNG;u5=SAMSUNG%20Galaxy%20S8%2C%20Smartphone%2C%2064%20GB%2C%205.8%20Zoll%2C%20Midnight%20Black%2C%20LTE%7CSAMSUNG%20Galaxy%20S8%2C%20Smartphone%2C%2064%20GB%2C%205.8%20Zoll%2C%20Arctic%20Silver%2C%20LTE%7CAPPLE%20iPhone%206%2C%20Smartphone%2C%2032%20GB%2C%204.7%20Zoll%2C%20Spacegrau%2C%20LTE%7CSAMSUNG%20Galaxy%20S8%2C%20Smartphone%2C%2064%20GB%2C%205.8%20Zoll%2C%20Orchid%20Grey%2C%20LTE%7CSONY%20PlayStation%204%201%20TB%20Schwarz%20%2B%20FIFA%2018%20%2B%202.%20DualShock4%20Controller%20%2B%20PS%20Plus%2014%20Tage%7CLENOVO%20C2%2C%20Smartphone%2C%208%20GB%2C%205.0%20Zoll%2C%20Schwarz%2C%20LTE%7CK%C3%84FER%20305016%20Caffe%20Espresso%2C%20Kaffeebohnen%7CSAMSUNG%20Galaxy%20J3%20(2017)%20Duos%2C%20Smartphone%2C%2016%20GB%2C%205%20Zoll%2C%20Schwarz%2C%20LTE;u6=2246306%7C2246307%7C2249741%7C2246308%7C2324918%7C2180274%7C1358723%7C2292599;u7=Handy%20%26%20Smartphone%20ohne%20Vertrag%7CHandy%20%26%20Smartphone%20ohne%20Vertrag%7CHandy%20%26%20Smartphone%20ohne%20Vertrag%7CHandy%20%26%20Smartphone%20ohne%20Vertrag%7CPlayStation%204%7CHandy%20%26%20Smartphone%20ohne%20Vertrag%7CKaffee%20%2B%20Tee%7CHandy%20%26%20Smartphone%20ohne%20Vertrag;u8=Smartphones%7CSmartphones%7CSmartphones%7CSmartphones%7CPS4%20Konsolen%7CSmartphones%7CKaffee%7CSmartphones;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=2110374163718.9888?] requested from [http://www.saturn.de/]. Sanitized URL: [https://6810627.fls.doubleclick.net/#6912567420447104334].

Is that expected behavior?
*Always* check the changelogs BEFORE updating that important software!
Board search is currently partially broken: https://forums.informaction.com/viewtopic.php?f=14&t=21752
Workaround: use your favorite search engine, add site:forums.informaction.com to your query
-
barbaz
Senior Member
 
Posts: 7735
Joined: Sat Aug 03, 2013 5:45 pm

Re: Firefox freezes when loading most pages on The Guardian

Postby vmac » Tue Oct 03, 2017 4:35 pm

Sorry, I'm a normal user of noscript. Therefore I can't understand your comments. I see that the website above will block my Firefox tab and the CPU usage is very high.
Mozilla/5.0 (Windows NT 6.3; WOW64; rv:56.0) Gecko/20100101 Firefox/56.0
vmac
 
Posts: 17
Joined: Sat Jun 03, 2017 11:49 am

Re: Firefox freezes when loading most pages on The Guardian

Postby barbaz » Tue Oct 03, 2017 4:40 pm

vmac wrote:Sorry, I'm a normal user of noscript. Therefore I can't understand your comments.

Sorry, should have made clear that the part about console messages wasn't directed at you.

If you haven't already Mark facebook.net as Untrusted, please try that and let us know if the problem persists.
*Always* check the changelogs BEFORE updating that important software!
Board search is currently partially broken: https://forums.informaction.com/viewtopic.php?f=14&t=21752
Workaround: use your favorite search engine, add site:forums.informaction.com to your query
-
barbaz
Senior Member
 
Posts: 7735
Joined: Sat Aug 03, 2013 5:45 pm

Previous

Return to NoScript Support

Who is online

Users browsing this forum: harryray2 and 9 guests