bitdefender.com opens in text only, and Firefox ghost

Ask for help about NoScript, no registration needed to post
paranoid

bitdefender.com opens in text only, and Firefox ghost

Post by paranoid »

I started using Noscript a few days ago, in my Firefox in OS X.
Today I went to bitdefender.com and it shows in text only. I never went to bitdefender.com before, so I don't know if I would have had this problem before.
I tried Safari, and the website looks just fine, with all the graphics.
I don't have this problem with any other website that I frequent, as far as I know so far.

I removed NoScript from Firefox. But the problem persists.
I'm afraid there might be a bigger problem?

Yesterday, I had several tabs open in Firefox, happily using Noscript. One of the tabs was opened to a crossword games site. It apparently uses Adobe Flash to run its crossword games. When I was about to retire for the night, I began to close each tab with Command+W. Then I noticed that a tab was opened to a page that I had never opened myself (I swear). It was a page on the crossword games site that listed its archived crosswords - not just the 1st page, but the 11th page of archived crosswords.

I wonder if the bitdefender.com showing in text only and the phantom opening the game site page are related somehow?

Do any of these things ring a bell with anybody?
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.5; rv:16.0) Gecko/20100101 Firefox/16.0
User avatar
therube
Ambassador
Posts: 7979
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: bitdefender.com opens in text only, and Firefox ghost

Post by therube »

> bitdefender.com and it shows in text only

Looks fine on my end.

> I removed NoScript from Firefox. But the problem persists.

Then it is not a NoScript issue.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 5.1; rv:35.0) Gecko/20100101 SeaMonkey/2.32
barbaz
Senior Member
Posts: 11143
Joined: Sat Aug 03, 2013 5:45 pm

Re: bitdefender.com opens in text only, and Firefox ghost

Post by barbaz »

paranoid wrote:Today I went to bitdefender.com and it shows in text only.
WFM even impersonating your browser/OS...
paranoid wrote:I removed NoScript from Firefox. But the problem persists.
I'm afraid there might be a bigger problem?
Or no problem on your end...
EDIT I set up Fx 16.0.2 in a Linux VM to check this, and here's the issue: lots of messages like this in the Error Console

Code: Select all

Warning: CSP WARN:  Directive default-src 'none' violated by http://download.bitdefender.com/resources/themes/draco/css/jquery.cart-widget.css
So your version of Firefox is blocking everything on that page, because of broken CSP. Not related to NoScript, it's an issue with the site.
paranoid wrote:Yesterday, I had several tabs open in Firefox, happily using Noscript. One of the tabs was opened to a crossword games site. It apparently uses Adobe Flash to run its crossword games. When I was about to retire for the night, I began to close each tab with Command+W. Then I noticed that a tab was opened to a page that I had never opened myself (I swear). It was a page on the crossword games site that listed its archived crosswords - not just the 1st page, but the 11th page of archived crosswords.
Well, Flash can do that...
paranoid wrote:I wonder if the bitdefender.com showing in text only and the phantom opening the game site page are related somehow?
Very unlikely.
paranoid wrote:Do any of these things ring a bell with anybody?
I have seen the "text only" thing under the following circumstances:
1) I'm blocking the CDN or whatever that serves the style of the site
2) The site is using UA sniffing, and I'm impersonating a browser and/or OS it doesn't recognize (or that isn't Gecko-compatible) :roll:

Never seen the "ghost opening tab" kind of thing for as long as I've used NoScript + (now my own fork of) ABP. Your version of Fx is old enough that I'd suggest you grab Adblock Plus 2.1.2 (do NOT update it even when prompted to!!!!!!) if you don't already have ABP, and NoRedirect configured to block all redirects by default (add as last rule: regex ".*" [without quotes], check only "Source"). That should get rid of those kind of things that NoScript doesn't already take care of.
*Always* check the changelogs BEFORE updating that important software!
SeaMonkey/9.80 (Macintosh; Intel Mac OS X 10.7) Gecko/35.0 Version/2.32
User avatar
therube
Ambassador
Posts: 7979
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: bitdefender.com opens in text only, and Firefox ghost

Post by therube »

That's an old version of Firefox you got there.
Ah, missed that.
And that is entirely the problem.
(Initially I would have thought a Style issue, but FF 16 goes well beyond Style.)

2012 was a very good year for browsers. I must say FF 16.0.2 loads speedily.
(But I mean really, take a look at 16, at how clean & expected everything is & compare that to what they put out today!)
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 5.1; rv:35.0) Gecko/20100101 SeaMonkey/2.32
barbaz
Senior Member
Posts: 11143
Joined: Sat Aug 03, 2013 5:45 pm

Re: bitdefender.com opens in text only, and Firefox ghost

Post by barbaz »

therube wrote:I must say FF 16.0.2 loads speedily.
You think that's fast, give Firefox 18.0.2 a try.
therube wrote:(But I mean really, take a look at 16, at how clean & expected everything is & compare that to what they put out today!)
Sometimes, publicly known security holes are preferable to the "new and improved" versions of the software. Note my signature ;)
*Always* check the changelogs BEFORE updating that important software!
SeaMonkey/9.80 (Macintosh; Intel Mac OS X 10.7) Gecko/35.0 Version/2.32
paranoid

Re: bitdefender.com opens in text only, and Firefox ghost

Post by paranoid »

Thank you very much, guys!
I even imagined maybe I got hit with the latest Adobe zero-day.
I will need to keep this page as a pdf.
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.5; rv:16.0) Gecko/20100101 Firefox/16.0
Post Reply