NoScript breaks iGoogle voice gadget

Ask for help about NoScript, no registration needed to post
John Smith

NoScript breaks iGoogle voice gadget

Post by John Smith »

For some reason, only when noscript is on, instead of showing my iGoogle Voice gadget I get this message...
This content cannot be displayed in a frame. To protect your security, the publisher of this content does not allow it to be displayed in a frame.
I have google.com and gmodules on my whitelist, I tried unchecking both XSS boxes, nothing helps.

I know I'm not the only person with this problem, I've seen many people posting about it, so I know a fix would be much appreciated.
Opera/9.80 (X11; Linux i686; U; en) Presto/2.6.30 Version/10.60
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: NoScript breaks iGoogle voice gadget

Post by Giorgio Maone »

It doesn't work because Google Voice does not want to be framed for security reasons, by using the X-Frame-Options header.
That's why neither IE, nor Chrome, nor Safari, nor Opera, nor Firefox with NoScript will make it work.
The only browser which let it work, because they don't support this security feature, is "vanilla" Firefox (and this is gonna change soon, too).

Luckily for you, NoScript's is the only implementation which lets you selectively disable this feature for some pages.
To enable iGoogle to host Voice, open about:config and add www.google.com to the noscript.frameOptions.parentWhitelist preference.
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2.6) Gecko/20100625 Firefox/3.6.6
Post Reply