ABE and Omniture Revisited

Discussions about the Application Boundaries Enforcer (ABE) module
User avatar
SeanM
Junior Member
Posts: 44
Joined: Fri Jul 24, 2009 1:42 pm
Location: Upstate, New York USA

ABE and Omniture Revisited

Post by SeanM »

Although related to a previous post in "NoScript General" (InformAction Forums • View topic - Is this a NoScript, NoScript/ABE or ?), I thought a post under "ABE" might be more appropriate.

While on "ESPN.com" (http://espn.go.com/), I found my old annoyance "Omniture". Once again embedded in the sites page, I tried the usual techniques. The specific usage occurs in a "rollover" on the "My ESPN" button, actually a drop-down logon script.

I set the following in the ABE "User" section:

Code: Select all

Site */javascript/wa/sOmni.js
Deny
which appeared to do the trick! However, the Error Console kicked out:

Code: Select all

Error: uncaught exception: [Exception... "Security error"  code: "1000" nsresult: "0x805303e8 (NS_ERROR_DOM_SECURITY_ERR)"  location: "http://a.espncdn.com/insertfiles/javascript/wa/sOmni.js?xhr=1 Line: 438"]
I assumed that this was an ABE-issued error, and verified same by resetting the ABE notification flag. I tried adding the following to the ABE User-set:

Code: Select all

Site */javascript/wa/sOmni.js?*
Deny
without any change to the resultant error message. As the application (the ESPN-logon) seems to work (actually, quite faster and without hesitation), I am interested in how to address this second script-call. It appears similar to the successfully blocked call:

Code: Select all

http://a.espncdn.com/insertfiles/javascript/wa/sOmni.js
http://a.espncdn.com/insertfiles/javascript/wa/sOmni.js?xhr=1
I gave thought to blocking

Code: Select all

http://a.espncdn.com/insertfiles/javascript/wa/analytics.js?xhr=1
One separate thought crossed my mind: Is the ABE-block that I entered actually working? After searching the docs and this forum, I did not find any option such as "verbose", to log all actions by ABE.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2b5) Gecko/20091204 Firefox/3.6b5
User avatar
SeanM
Junior Member
Posts: 44
Joined: Fri Jul 24, 2009 1:42 pm
Location: Upstate, New York USA

Re: ABE and Omniture Revisited

Post by SeanM »

An update on my post:
As the application (the ESPN-logon) seems to work (actually, quite faster and without hesitation), I am interested in how to address this second script-call. It appears similar to the successfully blocked call:

Code: Select all
http://a.espncdn.com/insertfiles/javascript/wa/sOmni.js
http://a.espncdn.com/insertfiles/javasc ... i.js?xhr=1
I may have spoke out of school on the application working correctly. Occasionally, as in 1 out of every 2 times using the rollover (q.v.), the popup displays an empty white area with a churning graphic. A simple refresh clears the problem, with no deletirious effects. However, the ABE error message is still present. How might I address this ? I persist, as I am trying to make a more-generic ABE-based block for my newest pet peeve.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2b5) Gecko/20091204 Firefox/3.6b5
Post Reply