[RESOLVED] NoScript broke Facebook OAuth2.0 authentication

Bug reports and enhancement requests
Post Reply
charles.chen
Posts: 3
Joined: Sat May 07, 2011 8:39 am

[RESOLVED] NoScript broke Facebook OAuth2.0 authentication

Post by charles.chen »

Here is the detail about Facebook OAuth 2.0
http://developers.facebook.com/docs/authentication/
I will redirect by FB to a empty page (below is what I got when viewing html source)
"<script type="text/javascript">/*<![CDATA[*/function si_cj(m){setTimeout(function(){new Image().src="http:\/\/error.facebook.com\/common\/scribe_endpoint.php?c=si_clickjacking&t=1319"+"&m="+m;},5000);}if(top!=self){try{if(parent!=top){throw 1;}var si_cj_d=["apps.facebook.com","\/pages\/","apps.beta.facebook.com"];var href=top.location.href.toLowerCase();for(var i=0;i<si_cj_d.length;i++){if (href.indexOf(si_cj_d)>=0){throw 1;}}si_cj("3 http:\/\/XXX.XXXX.XXXX\/XXXX.jsp");}catch(e){si_cj("1 \thttp:\/\/XXX.XXXX.XXXX\/XXXX.jsp");window.document.write("\u003cstyle>body * {display:none !important;}\u003c\/style>\u003ca href=\"#\" onclick=\"top.location.href=window.location.href\" style=\"display:block !important;padding:10px\">\u003ci class=\"img sp_cwqcqa sx_72ab0f\" style=\"display:block !important\">\u003c\/i>\u524d\u5f80 Facebook\u3002com\u003c\/a>");/*QX5OPab2*/}}/*]]>*/</script><script>window.location.replace("http:\/\/XXX.XXX.XXX#access_token=XXXXXXXX&expires_in=4944");</script>"


I can successful authenticate use FB OAuth 2.0 with all browsers but Firefox 4.0.1 (with NoScript 2.1.0.3)
Then I found that I can only disable NoScript to get it work. Globally enable javascript still broke the authentication process.

Is there anything I can setup to get around this?

Many thanks.
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0.1) Gecko/20100101 Firefox/4.0.1
User avatar
Giorgio Maone
Site Admin
Posts: 9527
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: NoScript broke Facebook OAuth2.0 authentication

Post by Giorgio Maone »

Can I see a test page?
Mozilla/5.0 (Windows NT 5.2; WOW64; rv:2.0.1) Gecko/20100101 Firefox/4.0.1
charles.chen
Posts: 3
Joined: Sat May 07, 2011 8:39 am

Re: NoScript broke Facebook OAuth2.0 authentication

Post by charles.chen »

Giorgio Maone wrote:Can I see a test page?
I have pm u my test url.
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0.1) Gecko/20100101 Firefox/4.0.1
User avatar
Giorgio Maone
Site Admin
Posts: 9527
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: NoScript broke Facebook OAuth2.0 authentication

Post by Giorgio Maone »

It work for me, provided that hithot.com, facebook.com, facebook.net and fbcdn.net are allowed.
Mozilla/5.0 (Windows NT 5.2; WOW64; rv:2.0.1) Gecko/20100101 Firefox/4.0.1
charles.chen
Posts: 3
Joined: Sat May 07, 2011 8:39 am

Re: NoScript broke Facebook OAuth2.0 authentication

Post by charles.chen »

Giorgio Maone wrote:It work for me, provided that hithot.com, facebook.com, facebook.net and fbcdn.net are allowed.
Many thanks, I tried again and it really strange... It broken when enable NoScript, and works well when just disable NoScript.
I even disable all the other addons, and it really looks like that the problem caused by NoScript.

So.... I uninstall firefox, delete all folders which created by firefox. and then reinstall firefox again.

You know what?
Everything works fine now.
Sorry waste your time.
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0.1) Gecko/20100101 Firefox/4.0.1
Post Reply