[RESOLVED] ABE & Facebook

Discussions about the Application Boundaries Enforcer (ABE) module
Fionavar
Posts: 9
Joined: Fri Jan 29, 2010 7:59 pm

[RESOLVED] ABE & Facebook

Post by Fionavar »

Facebook just added a new Photo Uploader Plugin and I am getting a Local Deny error. When I disable ABE it works fine. Any direction would be most appreciated.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.0.3, Ant.com Toolbar 1.1 GTBDFff GTB7.0 (.NET CLR 3.5.30729)
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: ABE & Facebook

Post by Giorgio Maone »

Can I see the whole message (i.e. the [NoScript ABE] line you get in Tools|Error Console)?
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6
Fionavar
Posts: 9
Joined: Fri Jan 29, 2010 7:59 pm

Re: ABE & Facebook

Post by Fionavar »

[ABE] <LOCAL> Deny on {GET http://127.0.0.1:3018/photos/uploader_i ... B&aid=7304 <<< http://www.facebook.com/, http://www.facebook.com/}
SYSTEM rule:
Site LOCAL
Accept from LOCAL
Deny
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.0.3, Ant.com Toolbar 1.1 GTBDFff GTB7.0 (.NET CLR 3.5.30729)
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: ABE & Facebook

Post by Giorgio Maone »

Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6
Fionavar
Posts: 9
Joined: Fri Jan 29, 2010 7:59 pm

Re: ABE & Facebook

Post by Fionavar »

This is what I now have:
# Facebook Photo Uploader Plugin exception
Site http://127.0.0.1:3018/photos/uploader_iframe.php
Accept from *.facebook.com

# Prevent Internet sites from requesting LAN resources.
Site LOCAL
Accept from LOCAL
Deny
But I received a new error with a different port?
Thanks for your patience and help BTW!
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.0.3, Ant.com Toolbar 1.1 GTBDFff GTB7.0 (.NET CLR 3.5.30729)
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: ABE & Facebook

Post by Giorgio Maone »

Thanks, I updated the same FAQ to reflect your further finding (they use random ports).
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6
Fionavar
Posts: 9
Joined: Fri Jan 29, 2010 7:59 pm

Re: ABE & Facebook

Post by Fionavar »

Hi Giorgio,

My ABE System Ruelset looks like this now:
# Facebook Photo Uploader Plugin exception
Site http://127.0.0.1:*/photos/uploader_iframe.php
Accept from *.facebook.com

# Prevent Internet sites from requesting LAN resources.
Site LOCAL
Accept from LOCAL
Deny
I am still getting the error - though when I disable the System setting, I have no trouble.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.0.3, Ant.com Toolbar 1.1 GTBDFff GTB7.0 (.NET CLR 3.5.30729)
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: ABE & Facebook

Post by Giorgio Maone »

What about

Code: Select all

Site 127.0.0.1
Accept from *.facebook.com
?
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6
Fionavar
Posts: 9
Joined: Fri Jan 29, 2010 7:59 pm

Re: ABE & Facebook

Post by Fionavar »

Yep - that did it! Thanks.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.0.3, Ant.com Toolbar 1.1 GTBDFff GTB7.0 (.NET CLR 3.5.30729)
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: ABE & Facebook

Post by Giorgio Maone »

FWIW, the ultimate (most restrictive yet effective rule) should be:

Code: Select all

# Facebook Photo Uploader Plugin exception
Site http://127.0.0.1:*/photos/uploader_iframe.php?*
Accept from *.facebook.com
Can you confirm?
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6
Fionavar
Posts: 9
Joined: Fri Jan 29, 2010 7:59 pm

Re: [RESOLVED] ABE & Facebook

Post by Fionavar »

Thanks! I made that adjustment too and it works as well.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.0.3, Ant.com Toolbar 1.1 GTBDFff GTB7.0 (.NET CLR 3.5.30729)
jik
Posts: 8
Joined: Thu Mar 25, 2010 2:57 pm

Re: [RESOLVED] ABE & Facebook

Post by jik »

Am having precisely this issue, but am a complete novice on NoScript. To install the ABE fix, am I to Refresh/Enable or Import/Export/Reset or ....?? Thank you.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.2) Gecko/20100316 Firefox/3.6.2 (.NET CLR 3.5.30729)
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: [RESOLVED] ABE & Facebook

Post by Giorgio Maone »

You've got to edit the SYSTEM ruleset as explained in FAQ 8.11
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2.2) Gecko/20100316 Firefox/3.6.2
jik
Posts: 8
Joined: Thu Mar 25, 2010 2:57 pm

Re: [RESOLVED] ABE & Facebook

Post by jik »

Thank you. When I click Edit I get a Windows popup that says
Windows cannot open this file
File: SYSTEM.abe
To open this file, Windows needs to know what program created it...etc.
[]Use the Web service to find the appropriate program
[]Select the program from a list
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.2) Gecko/20100316 Firefox/3.6.2 (.NET CLR 3.5.30729)
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: [RESOLVED] ABE & Facebook

Post by Giorgio Maone »

jik wrote:Thank you. When I click Edit I get a Windows popup that says
Windows cannot open this file
File: SYSTEM.abe
To open this file, Windows needs to know what program created it...etc.
[]Use the Web service to find the appropriate program
[]Select the program from a list
Select the program from a list and choose Notepad, it will work.
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2.2) Gecko/20100316 Firefox/3.6.2
Post Reply