1.9.5 Blocks LINKED Images From Wanted Websites

[Doug]

A website I visit regularly:
http://myastroimages.com/forum/viewtopic.php?f=10&t=170

NoScript 1.9.5 Blocks ALL Embedded IMAGES linked to another website:

Code: Select all

http://mai.myphotos.cc:10000/cm/albums/userpics/10007/NGC6543.jpg

Before in other versions of NoScript, I was prompted to allow other websites to link or not.

With Version 1.9.5 I have no options to allow another website embedded image to display.

IF I disable NoScript 1.9.5 all the images come through ok.

I could use IETAB to include this website and it works. I would like to have the option with NoScript to allow or disallow axillary websites...especially for images!

This problem happens on all my different PCs...I think it has something to do with the new version 1.9.5

[Tom T.]

Unable to reproduce on Fx2.-20, although there could be a difference in F3. All photos came through fine, even with scripting blocked completely, and also with the site temp allowed, and also with google-analytics.com allowed, and even with Adblock enabled, and also with it disabled. Checked that the photos were off-sire, as you said. Adblock shows origin of one photo as

Code: Select all

http://mai.myphotos.cc:10000/cm/albums/userpics/10007/NGC6543.jpg

, so the site is pulling the images from the other site.

Do you have Adblock Plus or Request Policy installed? Perhaps they're blocking the remote images. Any chance that you have the Microsoft .Net Framework Assistant v3.5, which has been causing innumerable bugs?

Might also try the latest development build of NS, and if still not good, the General Troubleshooting instructions.

Let us know. Thanks.

[Giorgio Maone]

It's working for me with latest development build 1.9.5.4.
Could you check it? If the problem persists, could you disable all the other extension and report the results?

[Doug]

Ok, I disabled all other Firefox add-ins, and installed 1.9.5.4...still didn't work.

Here is some more information about the problem:
I am on the same LAN as http://mai.myphotos.cc:10000/
In my "c:\WINDOWS\system32\drivers\etc\host" file I have an entry to point to the server's internal LAN address.
NoScript has been working great like this on the LAN for a long time until 1.9.5.

I tried connecting from a PC outside the LAN and NoScript worked fine. It could easily be blamed on the LAN, I know...but all I can say for my defense is it worked right before the last NoScript update. Maybe NoScript 1.9.5 treats LANs differently or ignores the HOST file?

Last note...I can browse DIRECTLY to the LAN server "http://mai.myphotos.cc:10000/" with no problems. It will not however show the embedded forum images on another site while I am surfing on the LAN.

Thanks,

Doug

[Doug]

I forgot to mention...if I disable NoScript then it works fine on the LAN. I would like to leave NoScript enabled...or I guess I could assign http://mai.myphotos.cc:10000/ (LAN server) to IETAB.

Just thought you should know. I have enjoyed your software for a long time. Thank you!

Doug

[Giorgio Maone]

Yes, NoScript 1.9.5 and above contains ABE, a new anti-CSRF component which, among other stuffs, protects your LAN from being linked by internet web pages.

You can work around by prepending the following rule to the SYSTEM ruleset in NoScript Options|Advanced|ABE:

Code: Select all

Site http://mai.myphotos.cc:10000
Accept

[Doug]

Yes, NoScript 1.9.5 and above contains ABE, a new anti-CSRF component which, among other stuffs, protects your LAN from being linked by internet web pages.

You can work around by prepending the following rule to the SYSTEM ruleset in NoScript Options|Advanced|ABE:

Code: Select all

Site http://mai.myphotos.cc:10000
Accept

PERFECT!

That worked!

Thank you very much!

Doug