Random specifc URL scripting blocked regardless of permissions

[lightningpgtt]

Initially: When Firefox starts, it reloads the previous tabs. and, in my case, there are typically several from youtube.com. I utilize mainly temporary permissions with a few rare exceptions; after Firefox loads, I must manually enable the scripts on the sites I need. Even if I don't restore the tabs, but load the site and then several videos in tabs, then enable scripting, the below issue occurs.

The issue: When I enable scripting on a particular domain, at least one tab (with that domain) will continue to block scripting. This occurs on only one random tab (sometimes the first I reload with permissions, but always within the first few I click to load) and is unaffected by disabling/enabling the permissions, nor enabling TRUST for the site. I can duplicate the tab, copy the URL manually, or close and reopen the tab, but scripting will not be enabled on that specific site with that specific URL unless I restart Firefox and start the random likelihood again.

Additional quirks: When this occurs, the NoScript icon changes from displaying blocked script numbers in the upper right-hand corner to the lower right hand corner, only with that page/URL. Also, if I navigate to the URL using any link (presumably utilizing referrer information) it will load normally. This will only affect that specific URL/video, in any tab or window, and persists until Firefox restart.

Example: www.youtube.com/videoxyz fails to load the youtube.com scripting when enabled, even after the page reloads. If I duplicate the tab, manually type the URL, use a bookmark, or any direct route to the page, the scripting stays disabled - but indicates enabled. However, if I go to www.youtube.com (which loads the scripting blocked in the other URL) and click the video link (or the link present in any other video or page), it takes me to the /videoxyz page and scripting is enabled normally - again, on that tab in that way. Even after it works, revisiting that URL directly starts the process again.

I'm otherwise happy with the extension, but this has been a puzzler to try to diagnose, let alone describe accurately. Thoughts?

Edited: Believe it or not, for clarity.

[therube]

What version of FF?
What version of NoScript?

[lightningpgtt]

There was too much time spent on the description and I ended up leaving out some critical information, eh?

Firefox: 129.0.1 (x64)
NoScript: 11.4.34

Also, the issue isn't confined to a single site, such as youtube.com used in the example. Cheers.

[barbaz]

Do you have another extension that maybe blocking the requests NoScript causes as an internal implementation detail? NoScript intercepts and blocks these requests before they're actually sent, but if another extension blocks them before NoScript can see them, weirdness like this can result.

If using uBlock Origin, add these lines in uBlock Origin Dashboard > My Rules -

Code: Select all

no-csp-reports: noscript-csp.invalid false
* https://noscript-csp.invalid/ csp_report allow
behind-the-scene https://[ff00::]/nscl/ xmlhttprequest allow

[lightningpgtt]

Thank you for the suggestion, but I do not employ a browser-level ad blocker. However, I applaud what could have been a neat catch. Thank you.

Probably one of the behaviors odd to me is that nothing (short of a browser restart) works, except visiting the offending page with a link that carries the referral header from YouTube. No copy/paste, duplicate tab, send-to-a-new-window, bookmark, direct input, or search engine result.

[lightningpgtt]

Even though this thread is aging, I shall still attempt updates if not for prosperity but to also credit those who have offered help.

The only thing I currently have to relate is that it is somehow related to viewing a site whose main purpose is to serve (a) video; YouTube.com is the most common one, but I discovered it can occur with the (pages) serving my NFL Network streams. The issue still persists on Firefox (131.0.3) with NoScript version 11.4.42, but is random enough I still cannot find the trigger pattern. Interestingly enough, I've noticed it occurring in Firefox Mobile for Android (131.0.3) also with NoScript version 11.4.42 on the same or similar sites or types.

[barbaz]

When this occurs, the NoScript icon changes from displaying blocked script numbers in the upper right-hand corner to the lower right hand corner, only with that page/URL.

Missed this when I last looked I don't think it's possible for WebExtensions to set which corner of the icon the badge is displayed in?

Another thing I'm missing: Did you try actually refreshing the affected page (Firefox reload button / Ctrl+R, or NoScript popup > click "Reload" button, or reloading bypassing cache with Ctrl-Shift-R)?

[lightningpgtt]

Hello. I missed your reply.

As far as the number location on the icon, I can only assume this is a result of whatever action NoScript is taking to block all scripts on the page/url. It only moves to the lower right corner when this issue persists.

Regarding page reloading, refreshing the page (either traditionally or bypassing the cache) does not alter the issue. The only "resolution" I've found is to deliberately close Firefox (from the menu, window, or forcefully) and reload it, which suffices to "reset" any temporary permissions granted. Oh, and enabling permanent permissions doesn't work since when a tab is initially selected after reloading the application (resulting in the page attempting to load), the same random chance occurs.

Thank you for the suggestion. Really, I think it's a bug that is difficult to isolate or catch timing-wise so that it does not occur in typical bug-check isolation; hence its persistence over many revisions of the extension (although I do not know upon which revision it actually started or if its existed all along). Cheers.