Userscript link blocked even when whitelisted

[seaweed]

Tried with both stable and the development version of NoScript.

http://mayhemydg.github.com/4chan-x/

Reproduce:
-Whitelist github.com, or even allow scripts globally, with the option "Block every object from a site marked as untrusted" enabled.
-Go to website above
-Try to click "INSTALL" link to a .user.js file.

Expected result:
-It works and goes straight to the file, because github is not marked as untrusted

Actual result:
-Link is blocked.

Disabling the "Block every object from a site marked as untrusted" option fixes the issue. "Fix Javascript links" option doesn't help at all.

[therube]

Best I can figure, is that you have to Allow Global & neither Apply these restrictions to whitelisted sites too nor Block every object coming from a site marked as untrusted can be selected.

Don't know why, or why Allow Global needs to be allowed?


(Page fails in FF 3.0, with NoScript removed.)

[Giorgio Maone]

Server misconfiguration (or, better, abuse of a code repository as a CDN):

Code: Select all

[NoScript] Blocking nosniff Javascript served from https://raw.github.com/mayhemydg/4chan-x/master/latest.js with wrong type info text/plain, inline and included by http://mayhemydg.github.com/4chan-x/

Work-around: add "https://raw.github.com/mayhemydg/4chan- ... /latest.js" (without quotes, space separated) to your noscript.inclusionTypeChecking.exceptions about:config preference.