Ask for help about NoScript, no registration needed to post
Martin E
Posts: 1 Joined: Sat May 24, 2014 9:02 am
Post
by Martin E » Wed May 28, 2014 3:37 pm
Hi there,
First of all, thanks for the great tool. It saves me a lot of worries.
Recently I stumbled upon a redirect where ther was none before. Upon researching it I found out it is a redirect inside the noscript tag.
This is the code (On the site I found it, it is located even above <!DOCTYPE..):
Code: Select all
<script language='javascript' src='//mgwlock.com/cpalocker/?a=get&cid=5692'></script><noscript>Enable Javascript to access this page. Powered by the <a href="http://mgcashgate.com">MGCash</a><meta http-equiv="refresh" content="0;url=http://mgcashgate.com/nojsnotice.html"/></noscript><script>if(typeof _mgAdNotBlocked=="undefined"){document.location="http://mgcashgate.com/adblocknotice.php?from="+escape(document.location)}</script>
Is there any way of blocking that?
Thanks in advance
Martin E
Mozilla/5.0 (X11; Linux i686; rv:10.0.11) Gecko/20100101 Firefox/10.0.11 Iceweasel/10.0.11
barbaz
Senior Member
Posts: 11163 Joined: Sat Aug 03, 2013 5:45 pm
Post
by barbaz » Wed May 28, 2014 3:47 pm
about:config -> set accessibility.blockautorefresh to true
*Always* check the changelogs BEFORE updating that important software!
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:29.0) Gecko/20100101 Firefox/29.0 SeaMonkey/2.26
therube
Ambassador
Posts: 7991 Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA
Post
by therube » Wed May 28, 2014 7:39 pm
Shouldn't (or rather why doesn't) NoScript's | Advanced | Untrusted -> Forbid META redirections... block it?
Code: Select all
<noscript>
Enable Javascript to access this page. Powered by the <a href="http://mgcashgate.com">MGCash</a>
<meta http-equiv="refresh" content="0;url=http://www.google.com"/>
</noscript>
Code: Select all
<html>
<head>
</head>
<body>
<noscript><meta http-equiv="refresh" content="0;url=http://www.google.com/"></noscript>
</body>
</html>
(replaced the head, body, which was in my sample but removed when first posting here)
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 5.1; rv:29.0) Gecko/20100101 SeaMonkey/2.26
therube
Ambassador
Posts: 7991 Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA
Post
by therube » Wed May 28, 2014 7:52 pm
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 5.1; rv:29.0) Gecko/20100101 SeaMonkey/2.26
therube
Ambassador
Posts: 7991 Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA
Post
by therube » Wed May 28, 2014 8:19 pm
And from the linked thread, this is successfully blocked:
Code: Select all
<html>
<head>
</head>
<body>
<noscript><meta http-equiv="refresh" content="0;url=://www.google.com/"></noscript>
</body>
</html>
vs
(protocol relative urls)
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 5.1; rv:29.0) Gecko/20100101 SeaMonkey/2.26