NoScript prevents video player from loading on a site

[CrazyDog10]

Windows 7 x64
Firefox 31b8
NoScript 2.6.8.33

http://www1.watchop.com/watch/one-piece-episode-634-english-subbed/

Steps to reproduce:
1. Start with a fresh profile.
2. Install NoScript and restart Firefox.
3. Once Firefox has restarted, select the 'Allow Scripts Globally' option.
4. Load the URL above.

What happens:
Notice that there is a big black block in the middle of the screen where the video player should be since it's not loading.

What should happen:
There should be a video player in the black box.

To prove that the problem is NoScript's, now disable NoScript and restart Firefox and to load the same page again. The video player now loads properly in the middle of the screen. It seems that this website recently changed the video player they use, as it was working fine a few days ago just allowing a few site scripts to get it to load. Unfortunately, the new player seems to trigger a bug in NoScript preventing it from loading.

[Giorgio Maone]

For some reason that escapes my understanding, they're serving JavaScript files with a .jsx file extension and the wrong content-type header (application/octet-stream), something that NoScript blocks to prevent generic user-managed file repositories to be used as JavaScript malware repositories:

[NoScript] Blocking cross-site Javascript served from http://cdn.directvid.com/fun3.jsx with wrong type info application/octet-stream and included by http://online.watchop.com/s/flownew_plu ... 2805543465

In this case, I think it's safe to add "cdn.directvid.com/*.jsx" to the noscript.inclusionTypeChecking.exceptions about:config preference, whose value becomes

Code: Select all

https://scache.vzw.com/ http://cache.vzw.com .sony-europe.com .amazonaws.com lesscss.googlecode.com/files/ .hp-ww.com .yandex.st cdn.directvid.com/*.jsx

[Thrawn]

Bump for viewtopic.php?f=10&t=19648&hilit=+options+advanced

[version X]

I'm having a similar problem with video playing on another site. I think something was introduced with the last Noscript update that is causing this as the website ( http://www.naruget.net/watch/1207-narut ... isode-367/ ), which has been working fine until then. I know it is Noscript because if I disable the extension the video works fine. Noscript is set to global allow for site. Previous time I visited the site was last week Thursday with no issues, but today can't play videos unless Noscript is disabled. Any suggestions?

[Giorgio Maone]

I think something was introduced with the last Noscript update

Not at all, it's a royal f*up introduced by the website.

Any suggestions?

Just two comments above in this thread.

[CrazyDog10]

Thanks for the help, Giorgio. That fix worked perfectly for the site I was having the problems with.

[Karl Napf]

Hello

I followed your post but it does not work.
Instead of playing a video I just see a black square.
Nothing works. very disappointing.

also links do not work with noscript anymore.

so I might have to look for an alternative

[Giorgio Maone]

I followed your post but it does not work.
Instead of playing a video I just see a black square.
Nothing works. very disappointing.

also links do not work with noscript anymore.

You don't even mention on which website and what script sources you've tried to allow to make it work...

[Guest]

I followed your post but it does not work.
Instead of playing a video I just see a black square.
Nothing works. very disappointing.

also links do not work with noscript anymore.

You don't even mention on which website and what script sources you've tried to allow to make it work...

I'm guessing that either he messed up somewhere with executing the workaround or he's got something else mixed in with his issue. Both of the mentioned websites are "birds of feather" and that one exception seems to work for all of them.

[Guest]

What I'd like to know is why NoScript does things like this even when you've told it the site is trusted. It's very annoying.

[Giorgio Maone]

What I'd like to know is why NoScript does things like this even when you've told it the site is trusted. It's very annoying.

It's exactly because you've told it the site is trusted and allowed to run JavaScript: since the JavaScript file in question is not served with the correct type, and therefore it's been potentially planted into the website by a 3rd party, NoScript blocks it because it could be not actually what you've chosen to trust.

[Thrawn]

Sometimes, trusting a site that is badly written can be as bad as trusting a site that's actually malicious...

[Nissemus]

Could there not be a menu option to just turn NoScript off completely for a specific site? Like "Ignore this site"?

[barbaz]

You shouldn't trust any website that much

[Thrawn]

What would be nice is this or this.