access denied after firefox update

Ask for help about NoScript, no registration needed to post
wkstone
Posts: 5
Joined: Fri Dec 28, 2018 1:07 pm

access denied after firefox update

Post by wkstone »

updated firefox to 72.0.1

NoScripts 11.0.11

now get access errors:

Access Denied
You don't have permission to access "http://www.costco.com/laptops.html" on this server.

Reference #18.b36b9d0.1578721360.c8246cc2

address bar clearly shows

https://www.costco.com/laptops.html

can only get to site if I disable noscripts.
This has happened in the past and seemed corrected, WTF
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0
wkstone
Posts: 5
Joined: Fri Dec 28, 2018 1:07 pm

Re: access denied after firefox update

Post by wkstone »

forgot my login and posted with other user id, this is my user id
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0
User avatar
therube
Ambassador
Posts: 7924
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: access denied after firefox update

Post by therube »

Confirmed.

But it must be a general website issue with Costco itself.
Oh, I'm definitely wrong on that, aren't I!


Now, I've got to remember just where I saw that me that message & what the cause was?
Access Denied
You don't have permission to access "http://www.costco.com/laptops.html" on this server.

Reference #18.45273017.1578748005.187155c
Ah, what was it?
Useragents? Cookies?

Are you using Private Browsing (which changes your UA)?


(These days, Mozilla does so much crap - on its own, like changing your UA if you use Private Browsing, or its' "tracking protection" - with no clear, easy way to disable, bypass, override, it makes using the web far more difficult - when then web doesn't coincide with the masters rules.)
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0 SeaMonkey/2.49.5
barbaz
Senior Member
Posts: 10841
Joined: Sat Aug 03, 2013 5:45 pm

Re: access denied after firefox update

Post by barbaz »

wkstone wrote: Sat Jan 11, 2020 6:11 am forgot my login and posted with other user id, this is my user id
Fixed.
wkstone wrote: Sat Jan 11, 2020 6:02 am now get access errors:
I can access that site fine with NoScript 11.0.12rc2.

Does it work for you with NoScript 11.0.12rc2?
Does it work for you with NoScript 11.0.12rc2 on Firefox 68 ESR?
*Always* check the changelogs BEFORE updating that important software!
-
User avatar
therube
Ambassador
Posts: 7924
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: access denied after firefox update

Post by therube »

No, there is an issue.

Whether NoScript is exacerbating the issue or not, not sure?

It might just be a (general browser) settings (cookie, UA, "privacy" setting) issue?

I actually saw it in multiple browsers (FF & SeaMonkey) - all of which are running NoScript, perhaps in Private Browsing (or not), & that is why I initially (incorrectly) thought it was a site issue.

Something along these lines, https://forum.palemoon.org/viewtopic.ph ... 18#p146118.


And now, in FF, with NoScript, in regular, in Private Browsing, I've had instances where the site loads, & instances where the site fails (with the above message).


(PS: In FF Nightly, when you want to change the UA - you now need an extension. [Wonderful.])
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0 SeaMonkey/2.49.5
User avatar
therube
Ambassador
Posts: 7924
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: access denied after firefox update

Post by therube »

Not a NoScript issue.
Not an "after FF update" issue.

Duplicated in a (mostly ;-)) new SeaMonkey Profile - that never had NoScript installed (yes, I know, heresy).
(I have been jumping between SeaMonkey 2.49 & 2.53 - with that same Profile, if that matters, with two differing UA, if that matters:
Mozilla/4.0 (Windows NT 6.1; Win64; x64; rv:56.0) 20100101 SeaMonkey/2.35.1
vs
Mozilla/4.0 (Windows NT 6.1; Win64; x64; rv:56.0) 20100101 SeaMonkey/2.35.1 Lightning/5.8.1)
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0 SeaMonkey/2.49.5
User avatar
therube
Ambassador
Posts: 7924
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: access denied after firefox update

Post by therube »

Maybe ? NoScript is playing exacerbating things here, in this instance?

URL: https://www.lowes.com/

NoScript installed, scripts blocked.
Chrome (Chromium, Edge), FF.

If lowes loads, refresh the page.

Gives you - perhaps:

You don't have permission to access "http://www.lowes.com/" on this server.
Reference #...


Maybe cookies or tracking protection too are involved?

Once you get the "you don't have permissions", even disabling NoScript might not get you anything - until cookies are cleared?
If you happen to get things to work - with NoScript, site might not work with scripts block, might might not work with allow all this tab, but site may work with allow globally?

Seems like some cookie (tracking, I'm sure), or something, somewhere is begin set, outside of "lowes" that lowes (costco, particular sites, ...) are relying upon & when not seen drop you to "you don't have permission...".

igodigital.com
lowes.com
www.lowes.com
lpcdn.lpsnmedia.net
consent-st.trustarc.com
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0 SeaMonkey/2.53.2 Lightning/5.8.1
User avatar
therube
Ambassador
Posts: 7924
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: access denied after firefox update

Post by therube »

allow globally
visit www.lowes.com
refresh page
block normally (unset allow globally)
remove all cookies
visit www.lowes.com
refresh page

at that point, lowes.com does not load

allow all this page
lowes does not load
unset allow all this page
lowes does not load
allow globally
lowes does not load
unset allow globally

remove all cookies

lowes loads
refresh page
lowes does not load

remove all cookies
allow all this page
load lowes.com
lowes loads
refresh page
lowes does not load
unset allow all this page

at this point, the only cookies you have are lowes.com & www.lowes.com

allow globally
visit lowes.com
does not load
refresh page
does not load

still, the only cookies you have are lowes.com & www.lowes.com

clear all cookies

(noscript is still allow globally at this point)

visit lowes.com
page loads
refresh
page loads
unset allow globally
page loads
refresh
page loads

remove igodigital.com cookie

at this point, the only cookies are lowes.com & www.lowes.com

refresh lowes.com
loads
allow all this page
refresh
loads
unset allow all this page
refresh
loads
allow globally
refresh
loads
unset allow globally
refresh
loads

at this point, all combinations work

remove all cookies

refresh
FAILS


So it seems that NoScript is having some effect on what happens.
And that can depend on what may or may not have happened - somewhere along the line - with cookies (in the most simple case).
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0 SeaMonkey/2.53.2 Lightning/5.8.1
User avatar
therube
Ambassador
Posts: 7924
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: access denied after firefox update

Post by therube »

If the site is in a non-working state
If the site is not allowed
You get a lot of Content Security Policy: messages

? Content Security Policy: The page’s settings blocked the loading of a resource at inline (“script-src”).

They reference many parts of code

?

Code: Select all

<script>
 $.cookie('invCheckPostalCode','', {path:'/',domain:'.costco.com', expires:-1});
 $.cookie('invCheckStateCode','', {path:'/',domain:'.costco.com', expires:-1});
</script>
With webconsole open, you do not get the message, "Access Denied You don't have permission to..."
But the page is "blank"

If you then clear the items in Storage, whatever it may show in use
And then Allow costco.com, the page loads
Console does not show CSP messages

If the site is in a working state
Dis-allow the site (in NoScript)
Console may then fill up with messages
If not, try clearing Storage data, again & refresh the page
A second refresh may be required
If not, fart around some more & you'll get it to break ;-)
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0 SeaMonkey/2.53.2 Lightning/5.8.1
User avatar
therube
Ambassador
Posts: 7924
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: access denied after firefox update

Post by therube »

similar may be occurring with a (url bar) google search - in a private window ?

dis-allow google.com
open a private window

paste in (the url bar), https://www.google.com/search?client=firefox-b-1-d&q=noscript+extension
or, type in, noscript extension
& hit return

Results:
(notice a flash, where the page "displays" - for an instant, then "rolls over" to a "blank" page)

"Nightly prevented this page from automatically redirecting to another page."

console: lots of CSP warnings

(perhaps something to do with Accessibility ?)

the "Nightly prevented..." message has an 'Allow' button
allowing then opens, https:// www.google.com/search?q=noscript+extension&client=firefox-b-1-d&gbv=1&sei=XABBXujuCLOrytMPp8WFwA8

so the search changed from
?client=firefox-b-1-d&q=noscript+extension
to
?q=noscript+extension&client=firefox-b-1-d&gbv=1&sei=XABBXujuCLOrytMPp8WFwA8
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0 SeaMonkey/2.53.2 Lightning/5.8.1
User avatar
therube
Ambassador
Posts: 7924
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: access denied after firefox update

Post by therube »

restart FF in safe mode
set, javascript.enabled;false
open a private window
type in, noscript extension, into the url bar
hit return

Results:

"Nightly prevented this page from automatically redirecting to another page." (along with an 'Allow' button)
the page itself displays, "Please click here if you are not redirected within a few seconds."

console: is clean, not spammed
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0 SeaMonkey/2.53.2 Lightning/5.8.1
skriptimaahinen
Master Bug Buster
Posts: 244
Joined: Wed Jan 10, 2018 7:37 am

Re: access denied after firefox update

Post by skriptimaahinen »

Here's what happens to me:

Javascript enabled:
Javascript disabled (either with NoScript or through about:config):
  • First time open (cookies and cache cleared) - site loads fine (seems blank but the content is there hidden by CSS).
  • After reload will give the "Access Denied" page. Enabling scripting at this point does not help, unless cookies and cache are cleared.
Since this happens also when javascript is disabled from about:config, it's not NoScript issue. Probably just some dumb bot detection system or something.

Blocking cookies for costco.com works around the problem, but don't expect to do any shopping like that.
Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0
Post Reply