NoScript won't stop the popups for Disqus

[j]

I'm having one hell of a time with NoScript and logging into things like Disqus (http://disqus.com). NoScript gives me the warning about ClearClick or whatever, but I can't disable at all. I don't want to disable it on all sites, I just want to mark disqus.com as being ok. I tried Whitelisting, but can't figure out how to enable it, it just keeps popping up. Big pain in the ass...

[Alan Baxter]

ClearClick alerts usually aren't affected by Whitelisting. Please click the "Report" button on the bottom of the ClearClick popup so your problem can be investigated. If you care to, it might help if you post the Report Id in this topic so Giorgio can see whose problem he's looking at; ask for additional information, if necessary; and possibly suggest a NoScript configuration change.

Hope this helps. Please let us know whether it does.

[Giorgio Maone]

In the meanwhile you can make ClearClick to be affected by whitelisting this way:

1. Open NoScript Options|Plugins
2. Uncheck "ClearClick Protection on pages... trusted

[jasonbarone]

Hey guys, here's some more details:
The error happens currently Disqus commenting system on http://mashable.com, it happens on any site with Disqus. Does NOT happen with IntenseDebate commenting system (which works the same way as Disqus).

After unchecking the CC error's "Keep this element blocked", then pop-up still comes again after trying to type in your login information. Also it will come up everytime you log out and try to login to a Disqus system. Also, note that if you try to use Sxipper to login, the login hangs up and just sits there, not sure if this is related to NoScript. I turned off Sxipper and you still the errors as shown below.

Here's some addons I use that relate changing things that happen on the page: Adblock Plus, AutoPager, Greasemonkey (no scripts related to Disqus or Mashable.com though), Sxipper.

I'm running XP, Firefox 3.0.10, NoScript 1.9.2.6.

[jasonbarone]

Images don't embed correctly here, here's the links:
http://lh5.ggpht.com/_y-FuNT2cYjQ/SgPm4 ... ror-01.jpg
http://lh5.ggpht.com/_y-FuNT2cYjQ/SgPm5 ... ror-02.jpg

[jasonbarone]

One more time:

http://picasaweb.google.com/lh/photo/Hd ... directlink
http://picasaweb.google.com/lh/photo/ue ... directlink

[Giorgio Maone]

@jasonbarone:
I'm investigating to see if the warning can be avoided in a future NoScript release, but in the meanwhile could you please send a report using the [Report] button on the warning itself and tell me the assigned ID?

[jasonbarone]

No problem, since it's gives me 2 consecutive warning, here are both:

102057 - Popup when clicking "Login with Disqus"
102058 - Popup when clicking a Text Area in the Disqus login field (after unchecking the and clicking OK to the first warning)

[Giorgio Maone]

OK, what happens is quite clear and there's not much I can do on my side, as code at least, because this is technically an UI redressing, albeit benign.

In facts, mashable.com is overlaying the iframe from discus.com with its own Facebook button, hiding part of its content.
Even if this has no malign intent, this behavior rightly triggers the ClearClick warning because an element from the parent document is partially obstructing the embedded document.

The easiest work-around is adding the following entry (space-separated from the existing ones) to the noscript.clearClick.subexceptions about:config preference:

Code: Select all

http://disqus.com/embed/*

[GµårÐïåñ]

wow, what would motivate a site to do something like this, seems so ... (can't find the right word so) asinine it is.