nosniff is blocking a script without telling me

Bug reports and enhancement requests
Post Reply
foresto
Posts: 2
Joined: Fri Feb 03, 2012 8:12 pm

nosniff is blocking a script without telling me

Post by foresto »

I was trying to see the javascript effect in the Demo section of this page:

http://polarblau.github.com/stickySecti ... ticky-list

...and it didn't work. I had allowed scripts on the site using the NoScript icon, and the icon didn't indicate that anything else was being blocked, so I believed the demo must be broken.

It turned out that NoScript was secretly blocking a script after all. The javascript console showed this message:

[NoScript] Blocking nosniff Javascript served from https://raw.github.com/polarblau/sticky ... headers.js with wrong type info text/plain, inline and included by http://polarblau.github.com/stickySectionHeaders/

WTF? I can't think of any reason why NoScript should block scripts without indicating that it is doing so. It just leads to frustration.

The same problem occurs when I tell NoScript to allow scripts globally, which would seem to be a problem as well.
Mozilla/5.0 (Ubuntu; X11; Linux i686; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
User avatar
therube
Ambassador
Posts: 7924
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: nosniff is blocking a script without telling me

Post by therube »

Link was broken.
Suppose this is it, http://polarblau.github.com/stickySectionHeaders/?

Code: Select all

[NoScript] Blocking nosniff Javascript served from https://raw.github.com/polarblau/stickySectionHeaders/master/src/jquery.stickysectionheaders.js with wrong type info text/plain, inline and included by http://polarblau.github.com/stickySectionHeaders/
I agree, I think.
Somehow we should be notified without needing to open Error Console.

Perhaps the NoScript icon could go black or something like that, a visual indicator. (And then a context-menu option to view Error Console.)
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 5.1; rv:12.0a2) Gecko/20120202 Firefox/12.0a2 SeaMonkey/2.9a2
User avatar
Giorgio Maone
Site Admin
Posts: 9454
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: nosniff is blocking a script without telling me

Post by Giorgio Maone »

Not sure it's worth the effort: careless developers like that will soon be forced adapt, since IE9 doesn't give any visual clue either of this (correct) blocking:
IE9 wrote: SEC7112: Script at https://raw.github.com/polarblau/sticky ... headers.js blocked because of a MIME type mismatch
(from IE9's console, deep buried inside IE9's developer tools)
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:10.0) Gecko/20100101 Firefox/10.0
User avatar
therube
Ambassador
Posts: 7924
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: nosniff is blocking a script without telling me

Post by therube »

(It's a shame F12, developers tools, wasn't included long long ago in IE. Who knows, may have actually even looked at IE had it been there. Quite odd that they include it now. Looks like there's some interesting stuff there. Maybe one day I'll take a look.)
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:12.0a2) Gecko/20120202 Firefox/12.0a2 SeaMonkey/2.9a2
Post Reply