XSLT xsl:import and document() don't work in 2.4.7

[doriantaylor]

Just wanted to let you know that for the past few revisions of NoScript, an idiom I've been using on a few sites for a number of years has stopped working, namely resources included from XSLT stylesheets via xsl:import or the document() function.

My own site, http://doriantaylor.com/ won't load with NoScript enabled, but will load in Firefox (13) safe mode. In the Firebug network panel (with NoScript enabled), these resources show up with throbbers spinning perpetually and never load. The page will usually be rendered blank or stay the same as the page before it.

I can prepare a test case, if you're interested.

[doriantaylor]

Upon closer inspection, it appears to be an interaction between an object or iframe tag and either the xsl:import element or document() function.

no object or iframe + document() or xsl:import = works
object or iframe + no document() or xsl:import = works
either object or iframe + either document() or xsl:import = blank page.

[doriantaylor]

Test case here: http://doriantaylor.com/file/djt-noscript-test.tar.gz

[Thrawn]

When I go to that site, I get an object placeholder, and if I click to allow it, I get an error:

Code: Select all

Error: doc.body is undefined
Source File: jar:file:///home/thrawn/.mozilla/firefox/fg32u649.default/extensions/%7B73a6fe31-595d-460b-a920-fcc0f8843232%7D.xpi!/components/noscriptService.js
Line: 4830

[Giorgio Maone]

Investigating from my hospital bed , thanks.

[doriantaylor]

Yikes. Get well soon!

[doriantaylor]

Hi Giorgio, hope you're better!

Did you have any luck with this bug? I opened the XPI but I have no idea where the code that affects document() and xsl:import lives.

Thanks!