Gadget on Igoogle no longer working with updated noscript

[jeg]

I have had a gadget called Hamster on my Igoogle page for as long as I have been using Noscript and/or Firefox. With the latest update Hamster is just a blank square, and Noscript shows nothing blocked, but if I disable Noscript Hamster works as it should. Other gadgets that use flash are still working, so why not Hamster? I would almost rather stop using Noscript than have to live without my Hamster. Also I keep trying to "allow all" on imdb.com but everything is still blocked, to the point of annoyance. Something is broken, can I downgrade Noscript?

[Giorgio Maone]

It's very likely a known Google bug, which will break lots of stuff (not just on Google) when IE9 is out unless they fix it first (they said they will, but it's complicated).
Could you check whether setting noscript.nosniff about:config preference to false helps?

[jeg]

That worked! But why, what did it do, if you don't mind my asking, or point me someplace where I can read the explanation? Thanks very much!!

[Giorgio Maone]

But why, what did it do, if you don't mind my asking, or point me someplace where I can read the explanation?

In my previous post I linked an explanation of the Google bug given by the IE9 team.
It applies to NoScript too, because both IE9 and NoScript support the X-Content-Type-Options security feature but Google implements it wrong.

[jeg]

Thanks for holding my hand, of course I didn't click the link the first time since I was too interested in just a fast easy fix for my Hamster. Seems rather unsafe to leave the config setting for nosniff at false, though..?

[Giorgio Maone]

Seems rather unsafe to leave the config setting for nosniff at false, though..?

Actually not that much, since NoScript has been enforcing inclusion type checks (albeit a bit less restrictive) for cross-site requests anyway for a long time.
This feature was an opportunity to be a bit more restrictive for sites which opt in and to score one point more in a certain test

[jeg]

Great, that eases my worries.
Thanks so much for all your kind help, have a great day!

[Giorgio Maone]

latest development build has a work-around for Google-related stuff, including Youtube, waiting for Google to fix their bugs.