NS 2.0.x + (including 2.0.2.1rc1) breaks MCE editor textbox

[GµårÐïåñ]

I have begun to notice since the first update into the 2.0.x branch that certain online forms using MCE Editor are breaking and the textboxes are not showing up like they should, even though the code is there and the site is fully allowed. This is my finding based on a system that I have access to that uses what is breaking and so I share that but chances are its breaking elsewhere as well but no one has noticed yet.

In a plain profile AND with a regular profile with NS disabled, you see:



Now in a clean profile with NS only AND with a regular profile with NS enabled, you see:



So I am not sure what's going on but the culprit seems to be directly NoScript and here is the code for the form by the way:

Code: Select all

<form name="form1" method="post" action="bk.php?loc=clan9" style="display: inline;">
<table width="100%" align="center" border="0" cellpadding="0" cellspacing="0">
<tbody><tr>
	<td valign="top" height="20"><b>Subject:</b> </td>
	<td valign="top" width="84%"><input value="" name="masstxt3" size="50" maxlength="50" id="masstxt3" type="text"> * max. 50 characters</td>
</tr>
<tr>
	<td valign="top" height="20"><b>Message:</b></td>
	<td valign="top"><textarea name="masstxt2" id="textarea" class="button" style="width: 100%; height: 250px; display: none;"></textarea><span id="mce_editor_0_parent" class="mceEditorContainer"><table class="mceEditor" style="height: 257px;" width="100%" border="0" cellpadding="0" cellspacing="0" height="257"><tbody><tr><td align="center"><iframe style="width: 100%; height: 188px;" allowtransparency="true" topmargin="0" leftmargin="0" marginheight="0" marginwidth="0" border="0" class="mceEditorIframe" id="mce_editor_0" width="100%" frameborder="0" height="188px"></iframe></td></tr><tr><td class="mceToolbarBottom" align="center" height="1"><a href="#" accesskey="q" title="Jump to tool buttons - Alt+Q, Jump to editor - Alt-Z, Jump to element path - Alt-X"></a><a id="mce_editor_0_bold" href="javascript:tinyMCE.execInstanceCommand('mce_editor_0','Bold',false);" onclick="tinyMCE.execInstanceCommand('mce_editor_0','Bold',false);return false;" onmousedown="return false;" class="mceButtonNormal" target="_self"><img src="http://s4.battleknight.us/tinymce/jscripts/tiny_mce/themes/advanced/images/bold.gif" title="Bold (Ctrl+B)"></a><a id="mce_editor_0_italic" href="javascript:tinyMCE.execInstanceCommand('mce_editor_0','Italic',false);" onclick="tinyMCE.execInstanceCommand('mce_editor_0','Italic',false);return false;" onmousedown="return false;" class="mceButtonNormal" target="_self"><img src="http://s4.battleknight.us/tinymce/jscripts/tiny_mce/themes/advanced/images/italic.gif" title="Italic (Ctrl+I)"></a><a id="mce_editor_0_underline" href="javascript:tinyMCE.execInstanceCommand('mce_editor_0','Underline',false);" onclick="tinyMCE.execInstanceCommand('mce_editor_0','Underline',false);return false;" onmousedown="return false;" class="mceButtonNormal" target="_self"><img src="http://s4.battleknight.us/tinymce/jscripts/tiny_mce/themes/advanced/images/underline.gif" title="Underline (Ctrl+U)"></a><a id="mce_editor_0_strikethrough" href="javascript:tinyMCE.execInstanceCommand('mce_editor_0','Strikethrough',false);" onclick="tinyMCE.execInstanceCommand('mce_editor_0','Strikethrough',false);return false;" onmousedown="return false;" class="mceButtonNormal" target="_self"><img src="http://s4.battleknight.us/tinymce/jscripts/tiny_mce/themes/advanced/images/strikethrough.gif" title="Strikethrough"></a><a id="mce_editor_0_justifyleft" href="javascript:tinyMCE.execInstanceCommand('mce_editor_0','JustifyLeft',false);" onclick="tinyMCE.execInstanceCommand('mce_editor_0','JustifyLeft',false);return false;" onmousedown="return false;" class="mceButtonNormal" target="_self"><img src="http://s4.battleknight.us/tinymce/jscripts/tiny_mce/themes/advanced/images/justifyleft.gif" title="Align left"></a><a id="mce_editor_0_justifycenter" href="javascript:tinyMCE.execInstanceCommand('mce_editor_0','JustifyCenter',false);" onclick="tinyMCE.execInstanceCommand('mce_editor_0','JustifyCenter',false);return false;" onmousedown="return false;" class="mceButtonNormal" target="_self"><img src="http://s4.battleknight.us/tinymce/jscripts/tiny_mce/themes/advanced/images/justifycenter.gif" title="Align center"></a><a id="mce_editor_0_justifyright" href="javascript:tinyMCE.execInstanceCommand('mce_editor_0','JustifyRight',false);" onclick="tinyMCE.execInstanceCommand('mce_editor_0','JustifyRight',false);return false;" onmousedown="return false;" class="mceButtonNormal" target="_self"><img src="http://s4.battleknight.us/tinymce/jscripts/tiny_mce/themes/advanced/images/justifyright.gif" title="Align right"></a><a id="mce_editor_0_justifyfull" href="javascript:tinyMCE.execInstanceCommand('mce_editor_0','JustifyFull',false);" onclick="tinyMCE.execInstanceCommand('mce_editor_0','JustifyFull',false);return false;" onmousedown="return false;" class="mceButtonNormal" target="_self"><img src="http://s4.battleknight.us/tinymce/jscripts/tiny_mce/themes/advanced/images/justifyfull.gif" title="Align full"></a><br><a id="mce_editor_0_bullist" href="javascript:tinyMCE.execInstanceCommand('mce_editor_0','InsertUnorderedList',false);" onclick="tinyMCE.execInstanceCommand('mce_editor_0','InsertUnorderedList',false);return false;" onmousedown="return false;" class="mceButtonNormal" target="_self"><img src="http://s4.battleknight.us/tinymce/jscripts/tiny_mce/themes/advanced/images/bullist.gif" title="Unordered list"></a><a id="mce_editor_0_numlist" href="javascript:tinyMCE.execInstanceCommand('mce_editor_0','InsertOrderedList',false);" onclick="tinyMCE.execInstanceCommand('mce_editor_0','InsertOrderedList',false);return false;" onmousedown="return false;" class="mceButtonNormal" target="_self"><img src="http://s4.battleknight.us/tinymce/jscripts/tiny_mce/themes/advanced/images/numlist.gif" title="Ordered list"></a><a id="mce_editor_0_outdent" href="javascript:tinyMCE.execInstanceCommand('mce_editor_0','Outdent',false);" onclick="tinyMCE.execInstanceCommand('mce_editor_0','Outdent',false);return false;" onmousedown="return false;" class="mceButtonDisabled" target="_self"><img src="http://s4.battleknight.us/tinymce/jscripts/tiny_mce/themes/advanced/images/outdent.gif" title="Outdent"></a><a id="mce_editor_0_indent" href="javascript:tinyMCE.execInstanceCommand('mce_editor_0','Indent',false);" onclick="tinyMCE.execInstanceCommand('mce_editor_0','Indent',false);return false;" onmousedown="return false;" class="mceButtonNormal" target="_self"><img src="http://s4.battleknight.us/tinymce/jscripts/tiny_mce/themes/advanced/images/indent.gif" title="Indent"></a><a id="mce_editor_0_undo" href="javascript:tinyMCE.execInstanceCommand('mce_editor_0','Undo',false);" onclick="tinyMCE.execInstanceCommand('mce_editor_0','Undo',false);return false;" onmousedown="return false;" class="mceButtonDisabled" target="_self"><img src="http://s4.battleknight.us/tinymce/jscripts/tiny_mce/themes/advanced/images/undo.gif" title="Undo (Ctrl+Z)"></a><a id="mce_editor_0_redo" href="javascript:tinyMCE.execInstanceCommand('mce_editor_0','Redo',false);" onclick="tinyMCE.execInstanceCommand('mce_editor_0','Redo',false);return false;" onmousedown="return false;" class="mceButtonDisabled" target="_self"><img src="http://s4.battleknight.us/tinymce/jscripts/tiny_mce/themes/advanced/images/redo.gif" title="Redo (Ctrl+Y)"></a><a id="mce_editor_0_cleanup" href="javascript:tinyMCE.execInstanceCommand('mce_editor_0','mceCleanup',false);" onclick="tinyMCE.execInstanceCommand('mce_editor_0','mceCleanup',false);return false;" onmousedown="return false;" class="mceButtonNormal" target="_self"><img src="http://s4.battleknight.us/tinymce/jscripts/tiny_mce/themes/advanced/images/cleanup.gif" title="Cleanup messy code"></a><br><a id="mce_editor_0_hr" href="javascript:tinyMCE.execInstanceCommand('mce_editor_0','inserthorizontalrule',false);" onclick="tinyMCE.execInstanceCommand('mce_editor_0','inserthorizontalrule',false);return false;" onmousedown="return false;" class="mceButtonNormal" target="_self"><img src="http://s4.battleknight.us/tinymce/jscripts/tiny_mce/themes/advanced/images/hr.gif" title="Insert horizontal ruler"></a><a id="mce_editor_0_removeformat" href="javascript:tinyMCE.execInstanceCommand('mce_editor_0','removeformat',false);" onclick="tinyMCE.execInstanceCommand('mce_editor_0','removeformat',false);return false;" onmousedown="return false;" class="mceButtonNormal" target="_self"><img src="http://s4.battleknight.us/tinymce/jscripts/tiny_mce/themes/advanced/images/removeformat.gif" title="Remove formatting"></a><a id="mce_editor_0_visualaid" href="javascript:tinyMCE.execInstanceCommand('mce_editor_0','mceToggleVisualAid',false);" onclick="tinyMCE.execInstanceCommand('mce_editor_0','mceToggleVisualAid',false);return false;" onmousedown="return false;" class="mceButtonSelected" target="_self"><img src="http://s4.battleknight.us/tinymce/jscripts/tiny_mce/themes/advanced/images/visualaid.gif" title="Toggle guidelines/invisible elements"></a><a id="mce_editor_0_sub" href="javascript:tinyMCE.execInstanceCommand('mce_editor_0','subscript',false);" onclick="tinyMCE.execInstanceCommand('mce_editor_0','subscript',false);return false;" onmousedown="return false;" class="mceButtonNormal" target="_self"><img src="http://s4.battleknight.us/tinymce/jscripts/tiny_mce/themes/advanced/images/sub.gif" title="Subscript"></a><a id="mce_editor_0_sup" href="javascript:tinyMCE.execInstanceCommand('mce_editor_0','superscript',false);" onclick="tinyMCE.execInstanceCommand('mce_editor_0','superscript',false);return false;" onmousedown="return false;" class="mceButtonNormal" target="_self"><img src="http://s4.battleknight.us/tinymce/jscripts/tiny_mce/themes/advanced/images/sup.gif" title="Superscript"></a><a id="mce_editor_0_forecolor" href="javascript:tinyMCE.execInstanceCommand('mce_editor_0','mceForeColor',true);" onclick="tinyMCE.execInstanceCommand('mce_editor_0','mceForeColor',true);return false;" onmousedown="return false;" class="mceButtonNormal" target="_self"><img src="http://s4.battleknight.us/tinymce/jscripts/tiny_mce/themes/advanced/images/forecolor.gif" title="Select text color"></a><br><a href="#" accesskey="z" onfocus="tinyMCE.getInstanceById('mce_editor_0').getWin().focus();"></a></td></tr></tbody></table></span>
	</td>
</tr>
<tr>
	<td valign="top" width="16%" height="20"> </td>
	<td valign="top">
		<input id="massmail_clan" name="massmail_clan" value="82" type="hidden">
		<input id="submit" name="massmail_abschicken" value="Send" type="submit">
	</td>
</tr>
</tbody></table>
</form>

Here is a direct link for anyone who might want to setup a free account to test this out and then you can go ahead and mark it for deletion and in 15 days they will remove it completely as long as you don't log back in it.

http://s4.battleknight.us/index.php?loc ... f=Mzc3ODg5

Now for Giorgio _ONLY_ so don't make it awkward by asking, I can give you MY credentials to log in and test with if you like but you can ask me in private for that, otherwise the link above will provide access to signup for a free account to test with; or you can try with any other site you know that uses the MCE Editor system and see if it can be replicated there as well or not.

[therube]

Any other places that have these MCE editors?

I found a tinyMCE, http://tinymce.moxiecode.com/examples/full.php.

With moxiecode.com blocked, about all you get is a message box & a Submit button.
With moxiecode.com allowed, all kinds of editing controls edit controls & what not.

Is that working for you? Is it representative of your site?

[GµårÐïåñ]

Yes, the same type of control. TinyMCE is the same thing. Yes, when NS is disabled and/or clean profile (as shown in the picture) you see everything just fine. When NS is enabled and/or using a profile with it there, it doesn't work (again as shown in the picture). In all cases, the site is fully allowed, that's not the issue, the issue is why the box is disappearing. So not sure what more information you are asking for, I guess I am confused as to where I wasn't clear.

[Giorgio Maone]

It's working fine for me.
I could use TinyMCE on both the "Messages" panel and the "Setup panel", where it allows you to enter a description.
The only difference with your screenshot is that it's offering only the basic inline formatting buttons (B/I/U), but if I open it with Chrome I can see exactly the same editor setup.

Are you sure you're using the default NoScript options? Any fancy ABE rule?
Notice that I just needed to enable "s4.battleking.us", even though I've got "apply to whitelisted sites as well" checked...

[GµårÐïåñ]

It's working fine for me.
I could use TinyMCE on both the "Messages" panel and the "Setup panel", where it allows you to enter a description.
The only difference with your screenshot is that it's offering only the basic inline formatting buttons (B/I/U), but if I open it with Chrome I can see exactly the same editor setup.

Actually there is more difference. If you look at the picture the box that the arrow is pointing to is the message box that also happens to have the formatting controls too. So basically you can't type a message into that field because it won't show, this is seen in the code (that I provided) which means it should be there but it isn't.

Are you sure you're using the default NoScript options? Any fancy ABE rule?
Notice that I just needed to enable "s4.battleking.us", even though I've got "apply to whitelisted sites as well" checked...

That cracks me up, I don't know if you are being sarcastic or you just sound that way. Anyway, no fancy scripts involving that domain, no. I am not using NS out of the box (with regards to the configs) but nothing that should be causing this because these settings haven't changed for MONTHS and it was working just fine before the 2.x branch, in fact I rolled back to the last 1.x build I could find and it works just fine. This is why I am nearly certain that it is something new happening. Would you like to see my user.abe content? I can also send you the whole config if you want so you can see nothing exotic there. I assure you, nothing there that is doing this. I have already enabled battleknight.us at the root and it always has been, that's not the issue.

I hope we can figure this out because I am quite perplexed as to WHY?

[Giorgio Maone]

Not sure whether you said that you tried on a clean profile with just a fresh NoScript installation?
If you did and the problem persists, but disabling NoScript works, you should check whether you've got "global" extensions, i.e. those like Skype or .Net Assistant which get automatically installed on new profiles.

Otherwise, if the problem goes away, please run Standard Diagnostic on your regular profile, and/or try to export and reset your NS opts.
If only the latter method helps, please send me your exported configuration.

[GµårÐïåñ]

Not sure whether you said that you tried on a clean profile with just a fresh NoScript installation?
If you did and the problem persists, but disabling NoScript works, you should check whether you've got "global" extensions, i.e. those like Skype or .Net Assistant which get automatically installed on new profiles.

Yes, I said that in the clean profile and also a profile with NS disabled it works fine. Its just when NS exists and enabled whether by itself or with anything else, that it doesn't work. I also do not have any global extensions such as Skype or .NET Assistant, never did and never will. I have ONE global extension and that's Roboform, that's it and that has been there forever and it wouldn't just now cause a problem especially that it hasn't been updated for over 2.5+ months.

Otherwise, if the problem goes away, please run Standard Diagnostic on your regular profile, and/or try to export and reset your NS opts.
If only the latter method helps, please send me your exported configuration.

The problem doesn't go away and I have done the standard diagnostic, that's all the information I included in the first post. I exported my settings and then reset and the problem still persists. Even using NS out of the box with no change to configuration still causes the problem. I am at a loss here