Picture viewer on Salon.com does not work

[beirne]

Recently Salon.com started using a new picture viewer, but I found that it does not work unless I disable NoScript. I also tried allowing scripts globally but it did not help. A sample page where this happens is http://www.salon.com/2012/10/30/sandys_ ... aftermath/, but I have found the viewer to fail wherever it is at Salon.com. The viewer is down the page a bit, titled "Sandy's shocking aftermath".

I'm running NoScript 2.5.9 on Firefox 16.0.2 on both a Mac and Windows. There are no error messages in the Firefox Error Console. I get this blue information message multiple times:

livesearch.js - DocumentComlete url: "http://www.salon.com/2012/10/30/sandys_ ... aftermath/" urlmatch: false

There are also a bunch of warnings about unknown properties, more than I can conveniently copy but I can get them as needed.

[therube]

Works.
I'm didn't try to see just what at minimum was needed, but with this selection, it works.

Code: Select all

-google.com
+cloudfront.net
-twitter.com
+googleapis.com
+google-analytics.com
-chartbeat.com
+fbcdn.net
+simpli.fi
+quantserve.com
+findthebest.com
+scorecardresearch.com
+findthedata.org
+facebook.com
+salon.com

[Beirne Konarski]

Hmmm, something more subtle is going on, then. I have Allow Scripts Globally turned on and the picture viewer still doesn't work. Were you able to walk through the pictures by clicking the arrows?

[therube]

Yes.
Perhaps you have a needed domain blocked elsewhere, like with Adblock Plus or even outside of FF, like with your HOST file.

[therube]

Looks like the ONLY domains needed are:

+google-analytics.com
+salon.com

So you must have google-analytics.com blocked somewhere.

Some New Yorker left a Bentley parked on the street to be submerged

Some New Yorker left a Bentley parked on the street to be submerged, so that he could collect insurance $$ .

[Beirne Konarski]

OK, Google Analytics is it. I do have it blocked, but when I enabled it the picture came right up. The puzzle now, though, is why allowing scripts globally did not make allow the viewer to work. If it had I would have gone through the blocked sites myself. Shouldn't this feature turn off all site blocking?

[therube]

It appears that if you have specifically marked a site as Untrusted, then an Allow Globally does not override that setting.

The Untrusted menu, if you have that displaying, should give you a clue in that respect, as it changes from Untrusted to Untrusted (1), with that (1) being google-analytics.com in this case.

Untrusted blacklist ... is especially useful if you decided to use the (not recommended) Temporarily allow top level sites by default or Allow Scripts Globally modes, because sites marked as untrusted won't be allowed anyway.

[Beirne Konarski]

OK, thanks for the explanation. The Allow Scripts Globally name is misleading, but now I at least understand the underlying blacklist feature. Also thanks for testing the site and narrowing it down to google-analytics.

[Thrawn]

This is why Giorgio has made a surrogate script for Google Analytics, to make sites work even with GA blocked. Maybe it needs to be enhanced?