[RESOLVED 2.0.9.6] NoScript blocking routers config page

Ask for help about NoScript, no registration needed to post
Delyrium

[RESOLVED 2.0.9.6] NoScript blocking routers config page

Post by Delyrium »

For some reason I cannot access my routers configuration page with NS running, this started happening with the latest update, if I disable NS and restart firefox the page loads just fine, the error I get when trying to access my router with NS enabled is "401 Authorization Required, Browser not authentication-capable or authentication failed." The page works fine with IE under win7 XPsp3 and XPsp2 which are the computers on my network.

Hopefully someone can shed some light on this matter, thanks in advance for the help.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
User avatar
Giorgio Maone
Site Admin
Posts: 9454
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: NoScript blocking routers config page

Post by Giorgio Maone »

could you check whether your problem persists with 2.0.9.3 from http://noscript.net/getit#direct ?
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Delyrium

Re: NoScript blocking routers config page

Post by Delyrium »

Thanks for the quick response, yes, the problem still persist with the version suggested.

The router is a linksys WRT54GH.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
User avatar
Giorgio Maone
Site Admin
Posts: 9454
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: NoScript blocking routers config page

Post by Giorgio Maone »

Delyrium wrote:this started happening with the latest update
So, does downgrading to a pre-2.0.9 version actually help?
Do you get any apparently NoScript-related error message in Tools|Error Console?
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Delyrium
Posts: 10
Joined: Tue Jan 04, 2011 3:55 pm

Re: NoScript blocking routers config page

Post by Delyrium »

Last time I successfully accessed the page was the past Saturday January 1st, when I added some port forwarding rules.

I downgraded to 2.0.8.1 and I can access the routers page with NS enable with no problems. I worked my way upward the NS releases from 2.0.8.1 and the problem appears on 2.0.9RC4 and subsequent releases.

Error console shows nothing related to NS.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
User avatar
Giorgio Maone
Site Admin
Posts: 9454
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: NoScript blocking routers config page

Post by Giorgio Maone »

Have you got any special ABE rule?
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Delyrium
Posts: 10
Joined: Tue Jan 04, 2011 3:55 pm

Re: NoScript blocking routers config page

Post by Delyrium »

Giorgio Maone wrote:Have you got any special ABE rule?
No, it is disabled.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
User avatar
Giorgio Maone
Site Admin
Posts: 9454
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: NoScript blocking routers config page

Post by Giorgio Maone »

Does it happen on a clean profile with just NoScript installed? (I'm trying to rule out a conflict or a specific configuration)

Could you try sniffing the HTTP traffic (e.g. with the HTTPFox extension) to see whether there are any differences between 2.0.9RC3 and 2.0.9RC4, beside the new X-Do-Not-Track-Me header?
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Delyrium
Posts: 10
Joined: Tue Jan 04, 2011 3:55 pm

Re: NoScript blocking routers config page

Post by Delyrium »

Reading back to the first post I wasn't clear enough in explaining the problem, I'll expand a little on the problem.

The routers page can't be displayed because after the authentication pop-up (where you input user/pass to access the router) nothing happens, the pop-up keeps appearing over and over again even after inputting the user/pass, doesn't even matter if they are correct or not, nothing happens.

The error message appears when canceling the pop-up "401 Authorization Required, Browser not authentication-capable or authentication failed".

My apologies if I have wasted time by not being clear in the first post.

The httpfox extensions doesn't show much as far as I could tell as no communication seems to go through when trying to access the router but it does capture the 401 which is when you cancel the login attempt.

I didn't find a way to export the information but copying it and given that all other options in the app are empty I chose to take screenshots instead of the only window with information. The only difference is that the content tab has the source code of the routers main page when using 2.0.9RC3 as it is correctly accessed.

[screenshots redacted for security]

Regards
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
User avatar
Giorgio Maone
Site Admin
Posts: 9454
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: NoScript blocking routers config page

Post by Giorgio Maone »

As you can see the Authorization header is sent in both instances. That's all your browser needs to do to authenticate itself.

My doubt is that your router gets confused by the DoNotTrack headers which precedes it (if so, it's a bug in the router's web server).
Could you please check whether disabling DoNotTrack by turning your noscript.doNotTrack.enabled about:config preference to false helps?
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Delyrium
Posts: 10
Joined: Tue Jan 04, 2011 3:55 pm

Re: NoScript blocking routers config page

Post by Delyrium »

Changing the value of noscript.doNotTrack.enabled to false didn't help.

Request Header - Value
(Request-Line) GET / HTTP/1.1
Host 192.168.1.1
User-Agent Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language en-us,en;q=0.7,es-hn;q=0.3
Accept-Encoding gzip,deflate
Accept-Charset ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive 115
Connection keep-alive
X-Behavioral-Ad-Opt-Out 1
X-Do-Not-Track 1
Authorization Basic [redacted]

Response Header - Value
(Status-Line) HTTP/1.0 401 Unauthorized
Server Apache
Pragma no-cache
Cache-Control max-age=0, must-revalidate
Connection close
Content-Type text/html
WWW-Authenticate Basic realm="WRT54GH"
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
User avatar
Giorgio Maone
Site Admin
Posts: 9454
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: NoScript blocking routers config page

Post by Giorgio Maone »

If you keep seeing those headers, HttpFox is probably reporting stale data.
It shouldn't be needed, but try to clear your cache and restart your browser first.
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Delyrium
Posts: 10
Joined: Tue Jan 04, 2011 3:55 pm

Re: NoScript blocking routers config page

Post by Delyrium »

Cache is cleared on exit and I did restart FF to be on the safe side, I did it again as requested but I still get the same info from httpfox.

(Request-Line) GET / HTTP/1.1
Host 192.168.1.1
User-Agent Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language en-us,en;q=0.7,es-hn;q=0.3
Accept-Encoding gzip,deflate
Accept-Charset ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive 115
Connection keep-alive
X-Behavioral-Ad-Opt-Out 1
X-Do-Not-Track 1
Authorization Basic [redacted]

(Status-Line) HTTP/1.0 401 Unauthorized
Server Apache
Pragma no-cache
Cache-Control max-age=0, must-revalidate
Connection close
Content-Type text/html
WWW-Authenticate Basic realm="WRT54GH"
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
User avatar
Giorgio Maone
Site Admin
Posts: 9454
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: NoScript blocking routers config page

Post by Giorgio Maone »

Mmm, still not convinced that this is not a cached redirect.
Could you try on a clean profile where you disabled doNotTrack before first access to the page?
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Delyrium
Posts: 10
Joined: Tue Jan 04, 2011 3:55 pm

Re: NoScript blocking routers config page

Post by Delyrium »

Still the same info displayed on a newly created profile, besides some java stuff the profile also carried over the kaspersky virtual keyboard extension, else only NS was installed and after the same stuff happening I installed httpfox to post the info.

2.0.9RC4
*******
00:00:47.042 0.043 494 171 GET 401 text/html http://192.168.1.1/
00:00:57.938 0.011 369 0 GET 404 text/html (NS_IMAGELIB_ERROR_NO_DECODER) http://192.168.1.1/favicon.ico
00:01:00.939 0.056 446 139 GET 404 text/html http://192.168.1.1/favicon.ico
*******
(Request-Line) GET / HTTP/1.1
Host 192.168.1.1
User-Agent Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 (.NET CLR 3.5.30729)
Accept text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language en-us,en;q=0.5
Accept-Encoding gzip,deflate
Accept-Charset ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive 115
Connection keep-alive
X-Behavioral-Ad-Opt-Out 1
X-Do-Not-Track 1
Authorization Basic [redacted]
*******
(Status-Line) HTTP/1.0 401 Unauthorized
Server Apache
Pragma no-cache
Cache-Control max-age=0, must-revalidate
Connection close
Content-Type text/html
WWW-Authenticate Basic realm="WRT54GH"
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 (.NET CLR 3.5.30729)
Post Reply