NoScript blocks script in local SVG file, can't see a way to unblock

Ask for help about NoScript, no registration needed to post
Moini
Posts: 7
Joined: Wed Mar 11, 2015 6:19 pm

NoScript blocks script in local SVG file, can't see a way to unblock

Post by Moini » Fri Nov 22, 2019 9:09 pm

Hi,

I've got an SVG file with a piece of javascript embedded in a script tag, and inside, wrapped in a CDATA section (because it's using 'less than' symbols which interfere with XML).

This SVG file lives in my /tmp directory.

If I browse there with file:///tmp/drawing.svg , the NoScript hover text over the icon in Firefox tells me that it has blocked 0 of 0 scripts, but the script does not seem to be executed.

If I open the console, it tells me "[NoScript] Some script managed to be inserted in the DOM while fetching policy, blocking it."

When I click on the NoScript icon, I get the message that 'this is a privileged page and you cannot change its permissions'.

When I check the noscript rule for file: it says that it's a trusted site.

So, how can I run the script in my own, self-created SVG file that is saved on my own computer, without entirely deactivating NoScript?

It once worked without a problem.

I frequently need to test local files with javascript, and I don't want to use another browser for it.

NoScript version: 11.0.9
Firefox version: 70.0.1
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:70.0) Gecko/20100101 Firefox/70.0

User avatar
Giorgio Maone
Site Admin
Posts: 8742
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: NoScript blocks script in local SVG file, can't see a way to unblock

Post by Giorgio Maone » Fri Nov 22, 2019 10:00 pm

Could you please send me that file for testing? Thanks!
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

Moini
Posts: 7
Joined: Wed Mar 11, 2015 6:19 pm

Re: NoScript blocks script in local SVG file, can't see a way to unblock

Post by Moini » Fri Nov 22, 2019 11:50 pm

Hi and thank you for taking the time to reply!

so, the most simple case is:
https://framadrive.org/s/xRLzQNGP4SBYBCL

A more common case is:
https://framadrive.org/s/w95HWX2AKTwAHRd

On Chromium, with the same version of NoScript, it works.
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:70.0) Gecko/20100101 Firefox/70.0

Moini
Posts: 7
Joined: Wed Mar 11, 2015 6:19 pm

Re: NoScript blocks script in local SVG file, can't see a way to unblock

Post by Moini » Sat Nov 23, 2019 12:02 am

Huh. I just deactivated and activated NoScript again. Now it works again...
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:70.0) Gecko/20100101 Firefox/70.0

Moini
Posts: 7
Joined: Wed Mar 11, 2015 6:19 pm

Re: NoScript blocks script in local SVG file, can't see a way to unblock

Post by Moini » Sat Nov 23, 2019 12:05 am

And after restarting, it doesn't work anymore. It's a bit strange, I'd say... Thanks for investigating.
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:70.0) Gecko/20100101 Firefox/70.0

Moini
Posts: 7
Joined: Wed Mar 11, 2015 6:19 pm

Re: NoScript blocks script in local SVG file, can't see a way to unblock

Post by Moini » Sun Nov 24, 2019 12:03 am

Just to be clear (not sure if that was understandable from my last two posts): it isn't working as it should - the enabling / disabling just seems to mask the problem.
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:70.0) Gecko/20100101 Firefox/70.0

User avatar
therube
Ambassador
Posts: 7468
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: NoScript blocks script in local SVG file, can't see a way to unblock

Post by therube » Sun Nov 24, 2019 2:53 pm

If I browse there with file:///
FF (72) says that file:/// is a privileged, so the (second) SVG does not animate.
But if I 'Disable restrictions for this tab' (or Allow Globally) it does.

I'll also note, the the "frame counter" increments in the URLbar, file:///C:/sandbox/bug_on_vine_wide_anim.svg#frame5113.
(That looks to be expected, I'm thinking.)
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0 SeaMonkey/2.49.5

User avatar
Giorgio Maone
Site Admin
Posts: 8742
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: NoScript blocks script in local SVG file, can't see a way to unblock

Post by Giorgio Maone » Mon Nov 25, 2019 10:26 pm

Fixed in 11.0.10rc1, thanks.
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

Moini
Posts: 7
Joined: Wed Mar 11, 2015 6:19 pm

Re: NoScript blocks script in local SVG file, can't see a way to unblock

Post by Moini » Mon Nov 25, 2019 10:30 pm

Molte grazie, Giorgio Maone! / Thank you very much! :)
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:70.0) Gecko/20100101 Firefox/70.0

Post Reply