noscript blocks access to external json file?

Ask for help about NoScript, no registration needed to post
dothebart

noscript blocks access to external json file?

Post by dothebart » Mon Jun 03, 2019 11:51 am

Hi,
noscript blocks our Database frontend when fetching external json files - the source where this happens is here:

https://github.com/arangodb/arangodb/bl ... iew.js#L38

It should i.e. fetch this file:
https://raw.githubusercontent.com/arang ... ifest.json

and parse the JSON.

Can you please explain why noscript intercepts this, and whether there is a smarter way to do it.

TIA,
Willi
Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Firefox/60.0

User avatar
therube
Ambassador
Posts: 7367
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: noscript blocks access to external json file?

Post by therube » Mon Jun 03, 2019 12:08 pm

(Not sure what I'm looking at/for, but I'll note that githubassets.com doesn't look to turn up, & presumably it should?)
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0 SeaMonkey/2.49.5

skriptimaahinen
Senior Member
Posts: 144
Joined: Wed Jan 10, 2018 7:37 am

Re: noscript blocks access to external json file?

Post by skriptimaahinen » Mon Jun 03, 2019 4:03 pm

Sanity check: you do have fetch enabled for the domain the json is fetched from, e.g. raw.githubusercontent.com?
Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0

dothebart

Re: noscript blocks access to external json file?

Post by dothebart » Tue Jun 04, 2019 11:55 am

it didn't work for me until I put the slider to 'temporarily trusted' - since thats a broad domain where everyone puts stuff to having it allowed seems rather dangerous to me, thats why I would like to know why 'external' download URLs are blocked in this case.

Is there a way to only allow download?
Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Firefox/60.0

skriptimaahinen
Senior Member
Posts: 144
Joined: Wed Jan 10, 2018 7:37 am

Re: noscript blocks access to external json file?

Post by skriptimaahinen » Tue Jun 04, 2019 3:33 pm

By default NoScript has fetch permission enabled for DEFAULT-preset. This should allow downloading (fetching/XHR) from all domains that have no explicit permissions set. However, if you have removed fetch permission from DEFAULT, you can allow it for domain of your choice by setting that domain to CUSTOM and only ticking fetch.
Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0

Post Reply