NoScript blocks some features on alternative.to

[klischee]

Hi

On AlternativeTo, you can add programs to your favorites by clicking the little heart. I've set the site to the whitelist, but I only can click the heart with success when I deactivate NoScript 1.9.9.45 completely in the addon manager of Firefox 3.6.

Another problem with the site is the OpenID login doesn't work with NoScript activated. When you click an logo, f.e. Google, you should get redirected to Google for signing in.

Third Problem: When I want to add an alternative to programs, there should be a realtime-supplement, but this don't appear with NoScript.

It seems scripts are always blocked, although there whitelisted.

I tested it with a completely fresh profile with nothing installed then NoScript, and without any changes.
The context menu entry "Allow scripts globally" didn't helped, only the deactivation of NS.

Hope you can help me out

[Giorgio Maone]

It's working fine for me as soon as I allow alternativeto.net and googleapis.com.
Please use NoScript Options|Reset and retry.
If the problem persists, maybe some other extension is interfering and you should use Standard Diagnostic.

[klischee]

Thanks for your help.

googleapis.com in the whitleist does the trick! But weird is this site wasn't showed up in the context menu of NoScript, only in my test profile.

And "Allow scripts globally" does not work either. It works for other sites (tested f.e. with last.fm), but googleapis.com seems to be blocked also when I allow scripts globally over the NoScript context menu. And because of alternativeto.net works correctly when I allow googlapis.com manually in the whitelist of NoScript, it seems not to be the problem of a firewall/AV-tool.

Edit: I've found out why googleapis.com got blocked and why it doesn't appears in the context menu of NoScript: There is a entry in the prefs.js / about:config:

Code: Select all

user_pref("noscript.untrusted", "com.com doubleclick.net eff.org gmodules.com google-analytics.com googleapis.com googlesyndication.com grou.ps intellitxt.com ivwbox.de seitzeichen.de shapeshed.com tvoi-dosug.com http://com.com http://doubleclick.net http://eff.org http://gmodules.com http://google-analytics.com http://googleapis.com http://googlesyndication.com http://grou.ps http://intellitxt.com http://ivwbox.de http://seitzeichen.de http://shapeshed.com http://tvoi-dosug.com https://com.com https://doubleclick.net https://eff.org https://gmodules.com https://google-analytics.com https://googleapis.com https://googlesyndication.com https://grou.ps https://intellitxt.com https://ivwbox.de https://seitzeichen.de https://shapeshed.com https://tvoi-dosug.com");

I don't know who or what created this "untrusted"-list - it's not created by me! Must be done from an addon? Adblock, BetterPrivacy, ... one of them possibly.

In addition, I have to allow google.com before I can allow googleapis.com (and before it appears in context menu).

[Giorgio Maone]

I don't know who or what created this "untrusted"-list - it's not created by me! Must be done from an addon? Adblock, BetterPrivacy, ... one of them possibly.

There are two known ways for that list to be populated:

1. In a "normal" configuration (default deny), you use the Untrusted submenu of the NoScript menu and Mark site.com as untrusted
2. In an "Allow scripts globally" configuration, sites you forbid go in that list.