NoScript and Firstcom

[Editz]

Running Firefox 3.6.13 with NoScript 2.0.9.7. Have found it blocks everything from www.firstcom.com even though the site has been white listed. Not sure what's going on. Disabling NS allows me to access the site normally. Firstcom did go through a major UI update recently, so I'm thinking there's something going on there. Any help would be appreciated.

[Giorgio Maone]

Code: Select all

[NoScript] Blocking nosniff Javascript served from https://github.com/malsup/blockui/raw/master/jquery.blockUI.js?v2.34 with wrong type info text/plain, inline and included by http://www.firstcom.com/

Looks like they're pulling down some JavaScript libraries from github, which is a public code repository which can be read and written by anyone.
This is a very dangerous practice, and in fact github tries to mitigate it by sending out the X-Content-Options: nosniff header together with a text/plain content type, which prevents the script from being loaded on browsers which correctly support the nosniff feature (NoScript and IE9, ATM).

If you want to work-around for this script only, you can add https://github.com/malsup/blockui/raw/m ... blockUI.js? to your noscript.inclusionTypeChecking.exceptions about:config preference (space separated).

[Editz]

Thanks for the info. I'll pass it along to their webmaster.

[Editz]

Code: Select all

If you want to work-around for this script only, you can add [b]https://github.com/malsup/blockui/raw/master/jquery.blockUI.js?[/b] to your [b]noscript.inclusionTypeChecking.exceptions[/b] [url=http://kb.mozillazine.org/About:config]about:config[/url] preference (space separated).[/quote]

I believe I added the exception properly (vzw.com was already in there), but I saw no change with Firstcom's site after re-starting Firefox.  Am I missing something?

[img]http://i55.tinypic.com/sowmit.jpg[/img]

[therube]

Not sure if all of these sites are needed (in addition to the Preference change), but give it a try:
Music isn't bad, even if the site could be dangerous .

(View Image, if need be.)

[Editz]

Yes, I already have NoScript set to accept everything from Firstcom, but the site's not displaying anything other than the blue background page. Same symptom I've had since this all began. Does NS need to be reinstalled after the Firefox preferences change or something?

[therube]

Are the other domains I show also allowed?
(Or temporarily Allow Globally. If that works, Revoke Temporary & then add back in sites to you get the mix that works.)

Reinstall certainly is not required.
Restart should not be required AFAIK.

Double check the exception entered.
(The '?', or anything following may or may not be needed. Seem to recall that ?* was not needed. Perhaps safer though?)

[Editz]

Took out the ? on the exception and it had no effect. Turned on Allow Global and it had no effect. I even DISABLED NoScript from the Firefox Add-ons list and restarted with NO EFFECT. Really crazy behavior! I can call up Firstcom with my copy of IE 8.0.6 just fine though.

I'll keep fiddling with it and keep you posted.

[therube]

I even DISABLED NoScript from the Firefox Add-ons list and restarted with NO EFFECT.

Then that makes it easy to determine that it currently is not a NoScript issue .

Adblock Plus or other "blocking" extension installed? Even a HOSTS file.

Start FF in -safe-mode. If it still does not work, then it is (most likely) external of "Mozilla".

[Editz]

Start FF in -safe-mode. If it still does not work, then it is (most likely) external of "Mozilla".

Yep, staring in safe mode with everything disabled produced the same result, so it's likely neither Adblock nor NoScript. Sorry for wasting everybody's time, but I swear there was one instance where I got Firstcom to come up properly by disabling NS. I relayed the script info to Firstcom's webmaster though, and they claimed they would be making revisions in the coming weeks.

[Editz]

Read a little about HOSTS files and tried the suggestion of pulling up the site, going to Work Offline mode, reloading and then going back Online. That seems to have worked and I can access Firstcom normally with FF 3.6.13 and the NS and AdBlock filters enabled.