NoScript WebGL blocking breaks whitelisted sites?

[aloishammer]

If WebGL is blocked for untrusted sites, it tends not to work for whitelisted sites.

Great examples:

1) Google Maps "Try WebGL": I get a "Testing..." legend followed by two NoScript placeholders. Maps eventually says my browser doesn't support WebGL. If I can click the placeholders fast enough (they're moving) and tell NoScript to "temporarily allow", eventually I can force WebGL to work in Maps. I have to do this after every browser restart. I *think* I'm allowing every *google*\.com dependency. I do access the site (all Google sites) over HTTPS.

2) http://www.nihilogic.dk/labs/worlds_of_webgl/ , no external dependencies whatever and no HTTPS. If I temporarily allow the site, I get a NoScript placeholder and the WebGL testing logic dies forever:

Code: Select all

Trying to get WebGL context
Trying experimental-webgl?
Trying moz-webgl?
Trying webkit-3d?
Got webkit-3d context
[dies]

The placeholder asks:

Code: Select all

Temporarily allow http://www.nihilogic.dk
(WebGL <CANVAS> / http://www.nihilogic.dk)

3) http://webglstats.com/ -- never works if WebGL blacklisting is on, no placeholders. Just tells me my browser doesn't support WebGL. (It does, clearly, or the Khronos demo would never run.)

What works: tell NoScript to not forbid WebGL for untrusted sites. No more placeholders, and trusted (temporarily or otherwise) sites Just Work. There's nothing logged by NoScript in the Error Console when WebGL blacklisting is on or off. If I disable NoScript WebGL blacklisting, 1), 2), and 3) all work, whether temporarily allowed or otherwise.

I've had this problem for a while (since at least Firefox (Aurora) 10), but haven't gotten around to reporting it before now. Presently using Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20120406 Firefox/13.0a2.

[dhouwn]

If there are no placeholders you can always use the menu.

[aloishammer]

If there are no placeholders you can always use the menu.

I'm confused. Use the menu to do what? There's a very clear breakage going on:

• Tell NoScript to block WebGL for untrusted sites
• Trust site, either temporarily or permanently.
• WebGL is still blocked by NoScript on the trusted site

[dhouwn]

Oh, oops, I thought this was about unblocking blocked WebGL. I have the setting for blocking such embeddings on untrusted sites too set. I sometimes forget it's not the default.

[aloishammer]

Oh, oops, I thought this was about unblocking blocked WebGL. I have the setting for blocking such embeddings on untrusted sites too set. I sometimes forget it's not the default.

I have every box checked under the Embeddings tab except:

Code: Select all

Forbid <FRAME>
Forbid @font-face
Apply these restrictions to whitelisted sites too