.JS are fetched from network even if scripts are disabled

[Nemoar]

Hi,
To save bandwidth on I'm using NoScript, ImgLikeOpera.

After upgrading to Firefox 5.0b7 and NoScript 2.1.1.2 (dont know which version I was using previously) firefox began to fetch .js JavaScript files from the network EVEN if the scripts are disabled in NoScript. (This was not the case previously.)

Upgrading to NoScript 2.1.2rc0 and setting "noscript.allowCachingObjects -> False" at about:config did not help.

Please advise.
Best regards

[al_9x]

Confirming. This is not a recent regression, it exists in gecko>=2.0 with any NS version. Fx 3.6 is ok. Too bad this wasn't caught earlier, bypassing blocked script fetching is a valuable privacy and perf feature.

test page:

Code: Select all

<script src="script.js"></script>

[Giorgio Maone]

I suppose it's an artifact of script and CSS prefetching operated by most recent versions of Gecko for performance reasons.
Checking what can be done about it...

[al_9x]

This appears to be a CAPS regression.

Code: Select all

user_pref("capability.policy.default.javascript.enabled", "noAccess");

The above policy prevents script fetching in Fx 3.6 but not in 4 & 5. I'll file a bug, but in the meantime can you compensate by explicitly blocking them ?

[al_9x]

https://bugzilla.mozilla.org/show_bug.cgi?id=668690

[Giorgio Maone]

Worked around in latest development build, thanks.

[al_9x]

Worked around in latest development build, thanks.

verified

[Nemoar]

Verified. And impressed with the speed of resolution.
+ Added to the list of software to be supported.

Thanks and Best Regards...

[al_9x]

This problem remains for https scripts loaded from http and https pages

Fx 6.0b4, NS 2.1.2.6rc2

load as https:

Code: Select all

<script src="script.js"></script>

load as http:

Code: Select all

<script src="https://ajax.googleapis.com/ajax/libs/jquery/1.6.2/jquery.min.js"></script>

Please include the version in your "latest development build" posts. You started doing it briefly, then stopped.

[Giorgio Maone]

Fixed in 2.1.2.6rc3.

[al_9x]

Fixed in 2.1.2.6rc3.

verified