[RESOLVED] Folding@home (Stanford University) - Web Control

[jmward]

Hi, I am an enthusiastic user of NoScript, which I regard as a security tool second only to wire-cutters in its effectiveness, and a great admirer of the wonderful development team. And yes, you're right, I do want something. I'm also an enthusiastic participant in the Folding@home distributed supercomputing medical project (https://folding.stanford.edu/home/). The Folding software includes web control and monitoring, but NoScript inhibits this - if I disable NoScript, Web Control works. The Web Control page works from http://folding.stanford.edu/client/, using various modes of local access, as far as I can tell (via 127.0.0.1, etc), so I have tried turning off ABE and XSS, and making the URL a trusted site, with no success. Unfortunately I'm just not good enough at this stuff to figure it out for myself (regular expressions bring me out in a rash), so I'm hoping you can tell me what adjustments to make to enable Folding@home Web Control.

No pressure; this is just an irritating WBN (would-be-nice), rather than a showstopper. But I look forward to finding out what the problem (and solution) is.

Regards,

J M Ward

[barbaz]

When it fails, do you see anything related in the Browser Console? (Ctrl-Shift-J)
(if you don't know what's related, turn off CSS warnings and post everything else you see)

[Thrawn]

If the spam filter won't let you post it, then send it to one of us via private message.

Thanks for posting!

[jmward]

Thank you for your replies. The problem seems to be related to ABE. The relevant log entry is as follows:

[ABE] <LOCAL> Deny on {GET http://127.0.0.1:7396/ping?callback=jQu ... 5713876486 <<< http://folding.stanford.edu/client/ - 2}
SYSTEM rule:
Site LOCAL
Accept from LOCAL
Deny

Regards,
JMW

[barbaz]

add above the default SYSTEM rule

Code: Select all

Site http://127.0.0.1:7396/*
Accept from folding.stanford.edu

[jmward]

Nice one, barbaz. Worked like a charm, once I'd removed an experimental USER rule that I'd entered.

Many thanks, that's improved my day no end.

Regards,
Martin Ward