RSS Feeds Broken by NoScript 10

[djl47]

My RSS Feeds failed to load. I disabled NoScript and checked the RSS feeds and they loaded fine. Anyone else seeing this?

[saladgoat]

Never happened in older Firefox with older NoScript versions, but now I cannot load my RSS feeds. Searching online found an older thread that suggested allowing the site. Did that and it worked for one RSS feed, but tried it for all the rest and did not work. All failed to load.

Doing this process also highlighted all the things I don't like about the new interface, which I will address separately.

[nsans]

Noticed the same thing. NoScript 10 seems to be blocking the RSS domain/links. Manually adding and trusting the top-level domain(s) of the RSS source in the NoScript options page fixed it for me.

[barbaz]

Threads merged.

[DJ_Damo]

Out of 17 Live Bookmark feeds this fix was only successful in making 6 of them work. Can't you make the new version work the same as the old one, regarding RSS feeds, instead of making us open up lots of new attack vectors?

[DJ_Damo]

This fix did not work on:
https://www.us-cert.gov/ncas/current-activity.xml
https://torrentfreak.com/
https://www.wired.com/most-recent/
https://www.blackagendareport.com/rss.xml
https://dissidentvoice.org/
https://www.nakedcapitalism.com/
https://www.counterpunch.org/
http://911blogger.com/
https://www.globalresearch.ca/
https://www.rt.com/news/
http://www.bbc.co.uk/news

It only worked on:
https://www.aclu.org/
https://www.eff.org/rss/updates.xml
http://www.tomshardware.com/
http://www.voltairenet.org/
https://theintercept.com/
http://www.washingtonsblog.com/

[DJ_Damo]

Atm, the better workaround is to open firefox, disable NoScript to let the RSS feeds load, then enable NoScript again before visiting any sites.

[SmokeRulz]

Yeah, my RSS feeds are all broken too by NoScript, but so is my XKit extension for Tumblr. When visiting Tumblr, the extension attempts to connect to the XKit servers to update any of its own extensions, and it cannot do it, resulting in a pop-up telling me of the problem. Manually updating also does not work and causes the page to hang. I can confirm NoScript is the problem, as disabling it (and enabling uMatrix as a backup) refreshes all my RSS feeds and lets me update XKit.

I can try and allow the top-level domains for all my RSS feeds, though judging by this thread, it's not guaranteed to work. I have no idea what domain I'm supposed to allow to make sure XKit works. NoScript never had these problems in Version 5.

[JustSomeGuy]

It appears as though some but not all Live Bookmark / RSS feeds cannot load.

For example:
AppleInsider works (http://appleinsider.com/rss/news/)
MacRumors doesn't (http://feeds.macrumors.com/MacRumors-All)

FYI: I'm running FF v58.0b4

[barbaz]

Threads merged.

[JustSomeGuy]

v10.1.2 fixed a lot of my broken feeds, but several are still broken.

Specifically:
https://arstechnica.com/
https://daringfireball.net/
https://www.phoronix.com/
https://developers.googleblog.com/
https://isocpp.org/blog
http://talkingpointsmemo.com/news

[Guest]

With the January 10th release, the below live bookmarks are broken for these feeds - although they work if they are pasted in on the address bar:

http://www.polygon.com/rss/index.xml
http://www.destructoid.com/?mode=atom
http://feeds.gawker.com/kotaku/full
http://www.gamespot.com/feeds/news/
http://www.heroesneverdie.com/rss/index.xml

Note: with the live bookmarks before Quantum/NS 10, the Kotaku feed wouldn't work either about 15% of the time - but the others always did.

[Guest]

With 10.1.6.4 (January 29th) release, the live bookmarks noted on 1/12/2018 are still not loading.

[Giorgio Maone]

With the January 10th release, the below live bookmarks are broken for these feeds - although they work if they are pasted in on the address bar:

http://www.polygon.com/rss/index.xml
http://www.destructoid.com/?mode=atom
http://feeds.gawker.com/kotaku/full
http://www.gamespot.com/feeds/news/
http://www.heroesneverdie.com/rss/index.xml

OK, I've just tried to add the http://www.gamespot.com/feeds/news/ and http://www.polygon.com/rss/index.xml as live bookmarklets, and they did load fine.
I've also tried forcing them to reload ("Reload live bookmark"), just to rule out any cache side effect, and watched them reload in the browser console (reported as XHR loads).
What I suspect is that you've removed the "fetch" permission from DEFAULT of whatever preset (CUSTOM?) you're using for those sites.
The fetch preset is needed for live bookmarks to load, and that's the main reason why it's included in the DEFAULT preset. Furthermore, no "normal" website could abuse of this permission without having the "script" permission as well, therefore the DEFAULT preset (with "fetch" but no "script") just lets the browser (whose internal scripts are privileged) to spawn its background request, without giving untrusted web pages any extra power.

[Guest]

The already existing bookmarks (as drop down lists of articles) still don't work.

Given what you found, I thought I'd try to see what happened when I added them as a brand new live bookmark. The new live bookmarks work just fine. I went ahead and deleted the old live bookmarks.