noscript prevents loading of allowed script

[Guest]

i've tried this with multiple noscript installs and browsers. it fails with noscript enabled, including on a fresh firefox/noscript install. it succeeds in every other tested browser and in firefox with noscript disabled.

http://jbrewer.github.com/Responsive-Me ... hurst.html

it is a demo page for some js that adjusts font size. it includes the following scripts:

Code: Select all

<script src="http://ajax.googleapis.com/ajax/libs/jquery/1.7/jquery.min.js"></script>
<script src="https://raw.github.com/jbrewer/Responsive-Measure/master/jquery.rm.js"></script>

both scripts are downloaded, but only the first (jquery) actually gets loaded and works. firebug indicates this error:

TypeError: $("#arm").responsiveMeasure is not a function

responsiveMeasure is defined in the second script, which appears to never load. the only difference i can see is http vs. https.

needless to say, noscript is set to allow all the domains on the page (googleapis and github).

[therube]

Code: Select all

[NoScript] Blocking nosniff Javascript served from https://raw.github.com/jbrewer/Responsive-Measure/master/jquery.rm.js with wrong type info text/plain, inline and included by http://jbrewer.github.com/Responsive-Measure/examples/bringhurst.html

Suppose you can work around it by adding an exception to noscript.allowedMimeRegExp?
I'm sure doing so would be considered very dangerous.

[Guest]

Code: Select all

[NoScript] Blocking nosniff Javascript served from https://raw.github.com/jbrewer/Responsive-Measure/master/jquery.rm.js with wrong type info text/plain, inline and included by http://jbrewer.github.com/Responsive-Measure/examples/bringhurst.html

Suppose you can work around it by adding an exception to noscript.allowedMimeRegExp?
I'm sure doing so would be considered very dangerous.

hey, thanks for the reply. how does one view the output you quoted?

so the problem is the script tag doesn't have type="text/javascript". why is that disallowed?

thanks again

[dhouwn]

hey, thanks for the reply. how does one view the output you quoted?

Error Console, which can be reached e.g. by pressing Ctrl + Shift + J.

so the problem is the script tag doesn't have type="text/javascript". why is that disallowed?

What matters in this case is the content type the server sends, stuff from github is only meant to be looked at, not meant to be embedded. Problem has come up numerous times like e.g. here, see also https://www.google.com/search?q=site%3A ... com+github.