[INVALID] FRAMEs are not blocked?

Ask for help about NoScript, no registration needed to post
Post Reply
andrea

[INVALID] FRAMEs are not blocked?

Post by andrea »

Salve,
come da oggetto, la versione 2.5.8(ho provato anche con la 2.5.9rc2), non blocca i tag frame.
Per esempio:

Code: Select all

    <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>

<frameset id="headerFrame" rows="70,*" frameborder="NO" border="0" framespacing="0" resizeable="no" scrollbars="no"> 
  <frame name="header" scrolling="NO" src="http://nome_dominio.tld" marginwidth="0" marginheight="0" NORESIZE>
  <frame name="content" src="pagina.html" marginwidth="0" marginheight="0" NORESIZE>
</frameset>
</html>
i tag frame non vengono bloccati.
Mozilla/5.0 (Windows NT 5.1; rv:16.0) Gecko/20100101 Firefox/16.0
Top
User avatar
Thrawn
Master Bug Buster
Posts: 3106
Joined: Mon Jan 16, 2012 3:46 am
Location: Australia
Contact:
Contact Thrawn

Re: [Bug - 2.5.8 e 2.5.9rc2] Non blocca i Frame

Post by Thrawn »

From Google Translate:
Hi,
as object, version 2.5.8 (I also tried with 2.5.9rc2), does not block the tag frame.
For example:

Code: Select all

    <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>

<frameset id="headerFrame" rows="70,*" frameborder="NO" border="0" framespacing="0" resizeable="no" scrollbars="no">
  <frame name="header" scrolling="NO" src="http://nome_dominio.tld" marginwidth="0" marginheight="0" NORESIZE>
  <frame name="content" src="pagina.html" marginwidth="0" marginheight="0" NORESIZE>
</frameset>
</html>
frame tags are not blocked.
======
Thrawn
------------
Religion is not the opium of the masses. Daily life is the opium of the masses.

True religion, which dares to acknowledge death and challenge the way we live, is an attempt to wake up.
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:16.0) Gecko/20100101 Firefox/16.0
Top
User avatar
Giorgio Maone
Site Admin
Posts: 9557
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:
Contact Giorgio Maone

Re: [Bug - 2.5.8 e 2.5.9rc2] FRAMEs are not blocked?

Post by Giorgio Maone »

It works for me, tested on 16.0.1 and 19.0a1:

http://evil.hackademix.net/test/frame

As expected, the middle frame, being same domain, is loaded, while the upper and the lower, being cross-domain, are blocked according to your permissions (i.e. if either the parent or the subdocument are not whitelisted, or if you're in click-to-play mode).

Please double check you've got "Forbid FRAMEs" checked in NoScript Options|Embeddings (notice there's a separate setting for FRAMEs and IFRAMEs).
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:16.0) Gecko/20100101 Firefox/16.0
Top
andrea

Re: [Bug - 2.5.8 e 2.5.9rc2] FRAMEs are not blocked?

Post by andrea »

Nella pagina http://evil.hackademix.net/test/frame funizona correttamente.

Ho scoperto, che non vengono bloccati, solo quando si verifica questa condizione:

-il parent è bloccato(il dominio non è nella whitelist)
-il subdocument non è bloccato(il dominio è nella whitelist)


Google Translate:
The page http://evil.hackademix.net/test/frame funizona properly.

I found out, that are not blocked, only when this condition occurs:

-the parent is blocked (the domain is not on the whitelist)
-the subdocument is not blocked (the domain is whitelisted)
Mozilla/5.0 (Windows NT 5.1; rv:16.0) Gecko/20100101 Firefox/16.0
Top
Guest

Re: [Bug - 2.5.8 e 2.5.9rc2] FRAMEs are not blocked?

Post by Guest »

Scusate ho fatto confusione. Ricapitolando:

Vengono bloccati: il parent è bloccato e il subdocument non è bloccato
Non vengono bloccati: il parent e il subdocument sono bloccati
Mozilla/5.0 (Windows NT 5.1; rv:16.0) Gecko/20100101 Firefox/16.0
Top
andrea

Re: [Bug - 2.5.8 e 2.5.9rc2] FRAMEs are not blocked?

Post by andrea »

Come non detto(quelle condizioni non valgono), ho fatto due pagine:

- http://statisticsweb.altervista.org/1.html -> Non Funziona (il frame non viene bloccato) -> imageshack.us/a/img803/3095/1html.jpg

- http://statisticsweb.altervista.org/2.html -> Funziona (il frame viene bloccato) -> imageshack.us/a/img202/5285/2html.jpg
Mozilla/5.0 (Windows NT 5.1; rv:16.0) Gecko/20100101 Firefox/16.0
Top
andrea

Re: [Bug - 2.5.8 e 2.5.9rc2] FRAMEs are not blocked?

Post by andrea »

In pratica, fa il controllo solo sul dominio di secondo livello e non su terzo, quarto, ecc... livello.
Mozilla/5.0 (Windows NT 5.1; rv:16.0) Gecko/20100101 Firefox/16.0
Top
User avatar
Thrawn
Master Bug Buster
Posts: 3106
Joined: Mon Jan 16, 2012 3:46 am
Location: Australia
Contact:
Contact Thrawn

Re: [Bug - 2.5.8 e 2.5.9rc2] FRAMEs are not blocked?

Post by Thrawn »

Google Translate:

Post 1:
Sorry I messed up. In summary:

Are blocked: the parent is locked and not locked subdocument
Are not blocked: the parent and the subdocument is locked

Post 2:
Forget it (these conditions do not apply), I had two pages:

- Http://statisticsweb.altervista.org/1.html -> not works (the frame is not locked) -> imageshack.us/a/img803/3095/1html.jpg

- Http://statisticsweb.altervista.org/2.html -> works (the frame is locked) -> imageshack.us/a/img202/5285/2html.jpg

Post 3:
In practice, it is the only control on the second level domain and not on the third, fourth, etc. ... level.
======
Thrawn
------------
Religion is not the opium of the masses. Daily life is the opium of the masses.

True religion, which dares to acknowledge death and challenge the way we live, is an attempt to wake up.
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:16.0) Gecko/20100101 Firefox/16.0
Top
User avatar
Giorgio Maone
Site Admin
Posts: 9557
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:
Contact Giorgio Maone

Re: [Bug - 2.5.8 e 2.5.9rc2] FRAMEs are not blocked?

Post by Giorgio Maone »

andrea wrote:In pratica, fa il controllo solo sul dominio di secondo livello e non su terzo, quarto, ecc... livello.
Please read this carefully.
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:16.0) Gecko/20100101 Firefox/16.0
Top
Post Reply

Return to “NoScript Support”