NoScript kills website object only when logged in

[Rossputin]

Hello all,

I frequently visit http://spectator.orgbecause I write articles for that site.

Near the top of the page, they have a fairly large "slider" which has images which relate to articles and lets readers "slide" left or right to get to various articles' headlines, then click on the image or title to open the page with the article. It's just below the green bar at the top, taking up a little more than half the screen from the left edge to just right of the center of the screen.

The site works fine when I am not logged in as a user, but when I am logged in, it seems that NoScript kills the "slider" box just after it opens.

I've added the site to trusted sites, and I've tried temporarily allowing all on the page, but it doesn't make a difference. So far, the only thing I've found to fix the problem is to disable NoScript.

Any advice on fixing this would be greatly appreciated!

Best,
Ross

[barbaz]

What do you mean by "kill"?
When this box gets "killed", are there any related messages in the Browser Console? (Ctrl-Shift-J)

[Rossputin]

I mean that the grey background of what would be the "slider" appears on the screen as the page is loading, and then just as the page is finished loading, it disappears instead of filling in with the images for the articles.

As for the console, it's way beyond my technical skill to understand, so I copied what I've gotten.

I've put the console results in a text file because when I tried to post the log here, it triggered the spam filter.
http://www.rossputin.com/console.txt

First I loaded the page while NOT logged in, and then Iogged in and reloaded the page...

[Thrawn]

Well, those console messages are showing JavaScript errors due to some missing objects.

I know you said that you tried temporarily allowing all on the page, but have you marked some sites as Untrusted? Or perhaps, after you did it, those scripts tried (and failed) to load other scripts in turn? What sites appear on your NoScript menu?

Can't investigate this in detail, I'm afraid, since it requires login.

[Rossputin]

I believe what is causing the issue is the ABE (Applications Boundaries Enforcer) in advanced settings. When I turn it off, problem goes away. So strange.

http://noscript.net/abe/

Does anybody understand this functionality well enough to let me know how I address this specific problem without completely disabling the protection?

Also, I created a new version of the log which might be easier to try to analyze.

I loaded the page while logged in. Early in the page loading, the gray box that would hold the slider shows up. Then the slider box, which never filled with an image or anything else, disappeared as one of the last things that happened when the page loaded.

Then at :35 seconds after the minute (i.e. 06:28:35 timestamp in log), I logged out, and the slider loaded.

http://www.rossputin.com/console.txt

[barbaz]

I could have sworn that I saw a previous version of your console logs containing both logged-in and logged-out messages, and that the main difference was this only appearing on login:

Code: Select all

[06:28:09.707] ReferenceError: _gaq is not defined @ http://spectator.org/sites/all/themes/spectator/js/main.js,qmwh0cm.pagespeed.jm.m9gFakJLQF.js:26

But maybe I'm wrong, because the logged-out messages are gone now...
Is google analytics allowed?
What version of NS are you using?

ABE also appears to be responsible for the DNT functionality in NS. If you enable ABE and go to about:config and set noscript.doNotTrack.enabled to false, does the site work?

[Rossputin]

NS version is 2.6.8.5

All Google stuff is allowed except for Google Ad Services.

Changing noscript.doNotTrack.enabled to false made the site work!!!!!!!!

What does that mean???

[Thrawn]

Well, it could mean that the site is being nasty, and refusing to work if you politely ask them not to track you.

Does it still work if you turn DNT back on, but add http://spectator.org to noscript.doNotTrack.exceptions?

[Rossputin]

Well, it could mean that the site is being nasty, and refusing to work if you politely ask them not to track you.

Does it still work if you turn DNT back on, but add http://spectator.org to noscript.doNotTrack.exceptions?

Yep, that works!!!!

[Thrawn]

I wonder whether there is some kind of a "name and shame" wall for sites that do this?