iNettuts demo page

[Marlon]

Hello,

This demo site here - http://d2o0t5hpnwv4c1.cloudfront.net/12 ... index.html - works in both IE and Chrome, it also works in firefox if I disable NoScript. But if I have it enabled it doesn't work (the edit and close icons don't show up and the divs aren't draggable) even if I allow scripts on the site and googlecode.com

I have a feeling it might be a XSS bug but I'm not entirely sure if I'm honest.

Firefox version - 3.6.12
NoScript version - 2.0.5.1

Its not a huge deal but just thought might be helpful to tell you.

[Alan Baxter]

It's a bug in the site. See this post for a workaround. (The workaround doesn't seem to work for this site.)
http://forums.informaction.com/viewtopi ... 243#p23243
From the Error Console:

Code: Select all

[NoScript] Blocking cross-site Javascript served from http://jqueryjs.googlecode.com/files/jquery-1.2.6.min.js with wrong type info text/x-c, attachment; filename="jquery-1.2.6.min.js" and included by http://d2o0t5hpnwv4c1.cloudfront.net/127_iNETTUTS/demo/index.html

Edit: Workaround doesn't work.

[Marlon]

ok yep that makes sense, thanks for clarifying it for me.

Apologise for thinking of it as a bug

[Alan Baxter]

This code works. Append it to the noscript.inclusionTypeChecking.exceptions about:config preference. Put a space in front it if there's already something there.

Code: Select all

/jquery-[\d+\.]+\.min\.js$