[labnol] NoScript & techamok.com

[Meromex]

Hi, for maybe 2 weeks, on the site "http://www.techamok.com/" in firefox, since the site made changes to their encoding no media loads, videos to be exact, it loads if i completely disable noscript from the add ons, I've tried enabling everything, changing the options on and off on all settings, still cant get it to load media unless i disable noscript.

can anyone give me a hand with this site?

[therube]

Working here.

+youtube.com
+ytimg.com
+vimeo.com
+vimeocdn.com
+techamok.com

Youtube: http://www.techamok.com/?pid=14318
Vimeo: http://www.techamok.com/?pid=14319

Now, I see there is also:

-labnol.googlecode.com

labnol: http://www.techamok.com/?pid=14321

And "labnol" is not working.

Code: Select all

[NoScript] Blocking cross-site Javascript served from https://labnol.googlecode.com/files/youtube.js with wrong type info text/plain, attachment; filename="youtube.js" and included by http://www.techamok.com/?pid=14321

And labnol is mentioned here, noscript blocking Load the YouTube Video Player On-Demand.


(Sounds like its going to be an ongoing problem.)

[usayad run]

I can see that from the the post, I've tried to user mpapad work around but have been unsuccessful at it.

i made 2 strings but should it be
file:///C:/folder/youtube.js
or
file:///C:\folder\youtube.js

im not sue as I've tested both with no luck

First you need to download the script (https://labnol.googlecode.com/files/youtube.js) to your hard drive.
I've placed it in the folder C:\Youtubejs_surrogate

Then you need to go to about:config page and add two keys
1st key is
noscript.surrogate.ytjs.sources
with the value
https://labnol.googlecode.com/files/youtube.js

2nd key is
noscript.surrogate.ytjs.replacement
with the value
file:///C:/Youtubejs_surrogate/youtube.js

Thats it!

[Meromex]

Never mind was a huge typo on my end, i saved the file to js.txt and i dint notice until i tried saving it again, it all works now, thanks for showing me the forum post on it

[Julien]

Isn't it possible to have an easier solution ?
Like XSS regex whitelist (which is already a little "advanced" for the average user) ?

Moreover, when you click "Allow scripts globally (dangerous)", the site techamok.com still does not work with "labnol" links.
And I noticed this with other sites (some functions on immoweb.be won't work at all, even with "allow scripts globally" activated ; I now use another browser for this site).

Thanks,
Julien.

[barbaz]

Well, you can add the exception in about:config > noscript.inclusionTypeChecking.exceptions

Code: Select all

https://labnol.googlecode.com/files/

but that's dangerous because you don't know what someone's committed to a source code repository, or if even the devs fully trust the changes they made..
The surrogate solution is safer for reasons detailed in another thread.