[RESOLVED] Broken: Jack in the Box Website

[GµårÐïåñ]

Well this is the second draft as my first one just poof reloaded and disappeared for no reason while I was typing. So here it goes AGAIN.

My cousin asked me to look at the jackinthebox.com to see why it will not function with NS enabled even when allowed. I took a look and sure enough he is right, its not working right with NS enabled, even whitelisted.

1. Go to http://www.jackinthebox.com
2. Without doing anything and NS blocking like it should, you see this:

3. Now allowing the main site (the only one showing) you then get NOTHING, see this:


There are no other domains listed that are needed to be whitelisted (at least not on the NS menu) and digging through their code and finding a reference to mosso.com being manually added does not fix the problem either. So I was wondering if you can tell me what's going on and how to fix perhaps. Bug? Bad config (which happens to be on both our machines?) Feedback and ideas on what's going is appreciated, TIA

[Alan Baxter]

Works for me.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.10) Gecko/2009042316 Firefox/3.0.10
NoScript 1.9.2.7
Default NS settings
If I Allow jackinthebox.com. I then see that mosso.com needs to be Allowed also. There's also a Blocked Object that will be allowed if mosso.com is. The main page nothing but flash.

[GµårÐïåñ]

Bummer, then how come on my NS it won't show mosso.com, just JIB and when allowed everything turns solid red (the background) and shows fully allowed but still no go? This happens on several other installs, I remoted into a couple other installations of mine and they did the same. I could have sworn its not a local problem.

EDIT: I reset the noscript.cp.last back to true and reloaded the page. After allowing jib (the main site) then I get this:

and there is a reference to mosso.com and allowing that makes it work. Not sure if that's what the problem was but its working now so I will keep an eye on it and see if changing back does a cripple again or not.

[Tom T.]

Hey, if you click "Text version", it works perfectly! (not kidding -- wish they'd all offer a text version of the whole site.)

G, isn't this the same issue as your post about speedtest.net? Namely, that after allowing JIB.com, I get a block-logo for a .swf object. Click TA, "OK", and in a few seconds, I'm hungry looking at that pile of cheeseburgers! For the record, I even left AdBlockO in full block mode. Site works fine.

[GµårÐïåñ]

Yeah the text works fine of course but I wanted to know why the flash was not loading, I think I might have figured it out but not sure if its coincidence or actually the reason it works now.

[Tom T.]

EDIT: I reset the noscript.cp.last back to true and reloaded the page.

My NS.cp.last was never changed from the default true, so maybe that's why I always get these nice Flash-block logos that I can click to TA?
Works everywhere -- YouTube, etc. -- and I *don't* have to give blanket permission to mosso.com, only to that specific Flash object. (Which is getting closer to those per-object permissions that have been under discussion for a long time.)

Anyway, that's how I deal with Flash at YouTube or anywhere else -- just allow only the single video, not the whole domain and all other scripting, etc. that might come with it -- how do I know what else mosso.com is loading? YMMV.

[therube]

So what was the outcome here? noscript.cp.last?

Toggling noscript.cp.last does not seem to affect what I see, but I suppose that is because my Adblock Plus filter set is different from yours? Or it could just be the (un)luck of the draw.

Currently priority can be only influenced by noscript.cp.last which forces, if true, NoScript's policy runs last.
Even if you set it to false, there's no assurance that NoScript do not runs last because there's no "order" in content policies (an overlooking in Geck design, I guess)

(Hope I'm correct in bolding the word, influenced.)

Also even though Flash has been blocked (in my case) until the placemarker has been clicked, is Flash "still loaded" in some manner? Just with "Please Wait... INITIALIZING SITE" displaying, I'm getting high CPU usage? Or is it something else causing the CPU draw? (I am not seeing evidence of Flash in /cache/ or elsewhere?)