NoScript is blocking my email access

The-unknown-user · Post by **The-unknown-user** » Tue May 01, 2018 7:44 pm

I hope it's not too late to pose a question about a "legacy" version of NoScript. I have a Microsoft "Live" email account. Since they have been force-feeding me its new email version, I can no longer log in to it with NoScript activated, I get an error message, and this is even with allowing all scripts. In order to access my email I have to totally deactivate NoScript. Any ideas what I can do to fix this? Is there a way to only deactivate NoScript on my email? This is NS version 2.9.5.3. Thank you.

Post by **Giorgio Maone** » Tue May 01, 2018 11:12 pm

Why aren't you using NoScript 5.x "Classic"?

The-unknown-user · Post by **The-unknown-user** » Tue May 01, 2018 11:39 pm

I'll try it and report back.

The-unknown-user · Post by **The-unknown-user** » Tue May 01, 2018 11:42 pm

Still doesn't work. Anything else to try?

Post by **barbaz** » Tue May 01, 2018 11:58 pm

When this issue occurs, do you see anything related in the Browser Console? (Ctrl-Shift-J)
(if you don't know what's related, turn off CSS warnings and post everything else you see)

The-unknown-user · Post by **The-unknown-user** » Wed May 02, 2018 2:42 am

Here it is:

Code: Select all

SyntaxError: An invalid or illegal string was specified jot_min_view__en.js:506:0
Blocking reflected script inclusion origin XSS from https://forums.linuxmint.com/viewtopic.php?f=90&t=268747&sid=084397bb795b34ef6c4ca592a2dfc631: https://docs.google.com/comments/d/AAHRpnXv4xP9q9-X1h7sQ89KXJzektmNFVijRSaGiC-djxeIAJs4EpTJCs485zbbHZpPVc_cnDW9WLP4_g9OaX0ygw-oRMPeJN_Mi0hq5x1vjh87TUkVs_OkTIgdRnRIQ5w0KXReGOX-N/api/js?anon=true&pref=2
embedded by
https://www.google.com/url?sa=p&q=https://docs.google.com/comments/d/AAHRpnXv4xP9q9-X1h7sQ89KXJzektmNFVijRSaGiC-djxeIAJs4EpTJCs485zbbHZpPVc_cnDW9WLP4_g9OaX0ygw-oRMPeJN_Mi0hq5x1vjh87TUkVs_OkTIgdRnRIQ5w0KXReGOX-N/api/js?anon=true&pref=2
uncaught exception: NoScript aborted redirection to https://docs.google.com/comments/d/AAHRpnXv4xP9q9-X1h7sQ89KXJzektmNFVijRSaGiC-djxeIAJs4EpTJCs485zbbHZpPVc_cnDW9WLP4_g9OaX0ygw-oRMPeJN_Mi0hq5x1vjh87TUkVs_OkTIgdRnRIQ5w0KXReGOX-N/api/js?anon=true&pref=2 <unknown>
Content Security Policy: Couldn't parse invalid host 'strict-dynamic' <unknown>
about:blank : Unable to run script because scripts are blocked internally. <unknown>
mutating the [[Prototype]] of an object will cause your code to run very slowly; instead create the object with the correct initial [[Prototype]] value using Object.create ConvergedLogin_PCore.js:19:1106
The site specified an invalid Strict-Transport-Security header.[Learn More] owa
[NoScript] Force text/plain for missing content-type on https://outlook.live.com/owa/

The-unknown-user · Post by **The-unknown-user** » Wed May 02, 2018 2:49 am

It looks like my previous post contains stuff from other tabs. Don't know how that happened. Hopefully what's below is what you need:

Code: Select all

The site specified an invalid Strict-Transport-Security header.[Learn More] owa
ThreadSources.prototype._fetchSourceMap threw an exception: Error: SyntaxError: JSON.parse: unexpected character at line 1 column 1 of the JSON data

URL:
https://outlook.live.com/owa/auth/aria-webjs-compact-sdk-1.2.0.min.js.map

Content (the first 1024 characters):
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
<!-- Copyright (c) 2011 Microsoft Corporation.  All rights reserved. -->
<!-- OwaPage = ASP.auth_errorfe_aspx -->


<html>



<head>

    <meta http-equiv="X-UA-Compatible" content="IE=10" />

    <meta http-equiv="Content-Type" content="text/html; CHARSET=utf-8">

    <title>Error</title>   

    <style>

        @font-face {

            font-family: "wf_segoe-ui_normal";

            src: url("/owa/auth/15.20.715/themes/resources/segoeui-regular.eot?#iefix") format("embedded-opentype"),

                 url("/owa/auth/15.20.715/themes/resources/segoeui-regular.ttf") format("truetype");

        }



        @font-face {

            font-family: "wf_segoe-ui_semilight";

            src: url("/owa/auth/15.20.715/themes/resources/segoeui-semilight.eot?#iefix") format("embedded-opentype"),

                 url("/owa/auth/15.20.715/themes/resources/segoeui-semilight.ttf") format("truetype");

        }



        @fo
[...]

Stack: SourceMapConsumer@resource://gre/modules/devtools/SourceMap.jsm:79:15
ThreadSources.prototype._fetchSourceMap/fetching<@resource://gre/modules/commonjs/toolkit/loader.js -> resource://gre/modules/devtools/server/actors/script.js:5453:19
Handler.prototype.process@resource://gre/modules/Promise.jsm -> resource://gre/modules/Promise-backend.js:867:23
this.PromiseWalker.walkerLoop@resource://gre/modules/Promise.jsm -> resource://gre/modules/Promise-backend.js:746:7
this.PromiseWalker.scheduleWalkerLoop/<@resource://gre/modules/Promise.jsm -> resource://gre/modules/Promise-backend.js:688:37
EventLoop.prototype.enter@resource://gre/modules/commonjs/toolkit/loader.js -> resource://gre/modules/devtools/server/actors/script.js:371:5
ThreadActor.prototype._pushThreadPause@resource://gre/modules/commonjs/toolkit/loader.js -> resource://gre/modules/devtools/server/actors/script.js:580:5
ThreadActor.prototype.onAttach@resource://gre/modules/commonjs/toolkit/loader.js -> resource://gre/modules/devtools/server/actors/script.js:692:7
DSC_onPacket@resource://gre/modules/commonjs/toolkit/loader.js -> resource://gre/modules/devtools/server/main.js:1450:15
LocalDebuggerTransport.prototype.send/<@resource://gre/modules/devtools/dbg-client.jsm -> resource://gre/modules/devtools/transport/transport.js:561:11
makeInfallible/<@resource://gre/modules/commonjs/toolkit/loader.js -> resource://gre/modules/devtools/DevToolsUtils.js:82:14
makeInfallible/<@resource://gre/modules/commonjs/toolkit/loader.js -> resource://gre/modules/devtools/DevToolsUtils.js:82:14
Line: 79, column: 14

Post by **barbaz** » Wed May 02, 2018 2:52 am

This is likely the relevant message -

The-unknown-user wrote:
Code: Select all
[NoScript] Force text/plain for missing content-type on https://outlook.live.com/owa/

I have no idea how to add exception for this feature, sorry.

Post by **Giorgio Maone** » Wed May 02, 2018 6:03 am

I've tried (Palemon 27.9.0 + NoScript 5.1.8.5) and it worked smoothly for me.
It smells a lot like an extensions conflict causing /owa HTTP headers to be stripped away, and NoScript's content-type protection to kick in as a consequence.
Could you check whether disabling all the extensions except NoScript helps, and if it does, try Standard Diagnostic|sd?

Anyway, this feature can be disabled (globally) by setting the noscript.nosniff about:config preference to false.

The-unknown-user · Post by **The-unknown-user** » Wed May 02, 2018 11:06 pm

Tried it will all extension disabled except NoScript but it still didn't work. However I did forget to mention that I am getting an error message on the actual email tab. Maybe something there will help? I'll post below. If all else fails, I'll just disable noscript.nosniff as mentioned.

The-unknow-user · Post by **The-unknow-user** » Wed May 02, 2018 11:07 pm

Code: Select all

cId: F45043F8824A4D16AFF58800F8719D7D
app: Mail
st: 500
reqid: undefined
wsver: undefined
efe: undefined
ebe: undefined
et: ClientError
esrc: BootStrings
err: undefined

The-unknow-user · Post by **The-unknow-user** » Fri May 04, 2018 12:17 am

Disabling noscript.nosniff doesn't help.

Post by **Giorgio Maone** » Fri May 04, 2018 1:45 am

Stupid question: does actually disabling NoScript help?

The-unknown-user · Post by **The-unknown-user** » Fri May 04, 2018 2:11 am

Yes, disabling NoScript enables me to view my email.

The-unknown-user · Post by **The-unknown-user** » Mon May 07, 2018 4:48 pm

So, is there anything else I can do or try?

InformAction Forums

NoScript is blocking my email access

NoScript is blocking my email access

Re: NoScript is blocking my email access

Re: NoScript is blocking my email access

Re: NoScript is blocking my email access

Re: NoScript is blocking my email access

Re: NoScript is blocking my email access

Re: NoScript is blocking my email access

Re: NoScript is blocking my email access

Re: NoScript is blocking my email access

Re: NoScript is blocking my email access

Re: NoScript is blocking my email access

Re: NoScript is blocking my email access

Re: NoScript is blocking my email access

Re: NoScript is blocking my email access

Re: NoScript is blocking my email access