"NoScript aborted redirection to" error

al_9x · Post by **al_9x** » Thu Jun 10, 2010 7:43 pm

Saw this in the console:

Error: 'NoScript aborted redirection to http://a.collective-media.net/ad/ns.neowin.net/homepage;ppos=btf;kw=;tile=2;sz=300x250,336x280,300x600;ord=123456789' when calling method: [nsIChannelEventSink::onChannelRedirect] = NS_ERROR_XPC_JS_THREW_STRING

wanted to know what this was, here's what I found:

It's coming from http://www.neowin.net/

Fx3.6.3, NS 1.9.9.87, new profile, allow neowin.net, forbid "web bugs"

Neowin has an ad iframe

Code: Select all

<iframe src="http://www.neowin.net/ads/leaderboard/atf?ajax=true" style="border:none;height:90px;width:728px;display:block" scrolling="no" frameborder="0"></iframe>

with the following content:

Code: Select all

<!DOCTYPE html>
<html>
	<head>
		<style type="text/css">
			body {
				padding: 0;
				margin: 0;
			}
		</style>
	</head>
	<body>
		<script type="text/javascript"> 
		//<![CDATA[
		ord = window.ord || Math.floor(Math.random()*1E16);
		document.write('<script type="text/javascript" src="http://ad4.netshelter.net/adj/ns.neowin.net/homepage;ppos=atf;kw=;tile=1;dcopt=ist;sz=728x90;ord=' + ord + '?"><\/script>');
		//]]>
		</script> 
		<noscript><a href="http://ad4.netshelter.net/jump/ns.neowin.net/homepage;ppos=atf;kw=;tile=1;sz=728x90;ord=123456789?" target="_blank" ><img src="http://ad4.netshelter.net/ad/ns.neowin.net/homepage;ppos=atf;kw=;tile=1;sz=728x90;ord=123456789?" border="0" alt="" /></a></noscript> 
	</body>

</html>

The first question is what should happen to <noscript> if inline script is allowed but included (ad4.netshelter.net), not. Currently if the page is root, such <noscript> is not active, but if it's an iframe, it is active. Why this inconsistency?
In this case it's an iframe, so <noscript> is activated and the web bug image loads
but it's not blocked by NS (forbid web bugs), why?
instead its 301 redirection is blocked producing the error at the top

Post by **Giorgio Maone** » Thu Jun 10, 2010 8:12 pm

This is probably an unwanted interaction with the "Show <NOSCRIPT> element which follows a blocked <SCRIPT>" preference.
Not sure of how easy it would be to fix...

al_9x · Post by **al_9x** » Thu Jun 10, 2010 8:58 pm

Giorgio Maone wrote:This is probably an unwanted interaction with the "Show <NOSCRIPT> element which follows a blocked <SCRIPT>" preference.
Not sure of how easy it would be to fix...

Forgot about that pref. So that answers the first question, <noscript> should be shown. That still leaves:

In my local test (same as neowin, external <script> is doc.written) <noscript> is not activated when the page is root
back to neowin, why is the web bug image in the <noscript> not blocked?
but its redirect is blocked?

al_9x · Post by **al_9x** » Sat Jun 12, 2010 1:56 am

Is "More consistent web bugs blocking with forced NOSCRIPT elements" in .88 for this?

Post by **Giorgio Maone** » Sat Jun 12, 2010 7:04 am

al_9x wrote:Is "More consistent web bugs blocking with forced NOSCRIPT elements" in .88 for this?

Yes.

al_9x · Post by **al_9x** » Sat Jun 12, 2010 7:26 am

Giorgio Maone wrote:
al_9x wrote:Is "More consistent web bugs blocking with forced NOSCRIPT elements" in .88 for this?
Yes.

I am seeing no changes in .88, the three points/questions from the previous post still apply.

Post by **Giorgio Maone** » Sat Jun 12, 2010 7:28 am

Did you clear your cache?

al_9x · Post by **al_9x** » Sat Jun 12, 2010 8:24 am

Giorgio Maone wrote:Did you clear your cache?

yes, new profile, no cache

For #1, here's a test page, allow file://, forbid web bugs

Code: Select all

<html>
<head>
</head>
<body>
<script>
alert('inline script:' + location);
document.write("<script src=\"http://nontrusted.invalid/\"><\/script>");
</script>
<noscript>
web bug: <img src="http://software.informaction.com/data/noscript/no16.png">
</noscript>
</body>
</html>

when top level, <noscript> is not shown at all
when an iframe, <noscript> is shown but the web bug is not blocked, despite forbid web bugs

for #2 & #3: new profile, allow neowin.net, forbid web bugs, load http://www.neowin.net/

you should get:

Code: Select all

Error: [Exception... "'NoScript aborted redirection to http://a.collective-media.net/ad/ns.neowin.net/homepage;ppos=atf;kw=;tile=1;sz=728x90;ord=123456789' when calling method: [nsIChannelEventSink::onChannelRedirect]"  nsresult: "0x8057001e (NS_ERROR_XPC_JS_THREW_STRING)"  location: "<unknown>"  data: no]

this indicates that the web bug image in the ad iframe is not blocked, but its redirection is aborted (curious, why?) with the above error.

Post by **Giorgio Maone** » Sat Jun 12, 2010 2:54 pm

Please check latest development build

al_9x · Post by **al_9x** » Sat Jun 12, 2010 4:42 pm

Giorgio Maone wrote:Please check latest development build

Regarding my test page
1. When loaded as an Iframe, the web bug image is no longer visible, but according to a sniffer, a request (and response) for it is still made
2. When loaded top level, <noscript> is not shown at all

Regarding neowin

the redirect error is gone because it's no longer aborted, instead of not being made at all, i.e. the web bug request is not being blocked.

The <noscript> content in the ad iframe is displayed as html source

Code: Select all

<a href="http://ad4.netshelter.net/jump/ns.neowin.net/homepage;ppos=atf;kw=;tile=1;sz=728x90;ord=123456789?" target="_blank" ><img src="http://ad4.netshelter.net/ad/ns.neowin.net/homepage;ppos=atf;kw=;tile=1;sz=728x90;ord=123456789?" border="0" alt="" /></a>

Post by **Giorgio Maone** » Sun Jun 13, 2010 5:57 pm

Please check latest development build.

al_9x · Post by **al_9x** » Sun Jun 13, 2010 7:06 pm

Giorgio Maone wrote:Please check latest development build.

fixed

InformAction Forums

"NoScript aborted redirection to" error

"NoScript aborted redirection to" error

Re: "NoScript aborted redirection to" error

Re: "NoScript aborted redirection to" error

Re: "NoScript aborted redirection to" error

Re: "NoScript aborted redirection to" error

Re: "NoScript aborted redirection to" error

Re: "NoScript aborted redirection to" error

Re: "NoScript aborted redirection to" error

Re: "NoScript aborted redirection to" error

Re: "NoScript aborted redirection to" error

Re: "NoScript aborted redirection to" error

Re: "NoScript aborted redirection to" error