NoScript With Readability

Ask for help about NoScript, no registration needed to post
Jack_L

NoScript With Readability

Post by Jack_L »

Hi everyone. First i want to thank developers for making this essential FF addon for security. Does anyone know how to make Noscript work with readability - without pressing "temporary allow all on this page" constantly? I tried doing as told in http://help.readability.com/customer/po ... h-noscript but didn't helped. I added readability.com to whitelist and ^https?://www.readability.com/articles/queue$ to anti XSS protection exceptions. Still doesn't work. Any ideas? Thanks.
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
User avatar
Thrawn
Master Bug Buster
Posts: 3106
Joined: Mon Jan 16, 2012 3:46 am
Location: Australia
Contact:

Re: NoScript With Readability

Post by Thrawn »

First, their XSS rule is flawed, and should be escaping the dots:

Code: Select all

^https?://www\.readability\.com/articles/queue$
Second, they advise removing the addon and using bookmarklets instead. Presumably this is because the extension is trying to run scripts in the page context, which means it gets blocked by NoScript as if it was the page. Do you have problems on whitelisted sites? Or Is there a readability-related site that appears on the menu each time?
======
Thrawn
------------
Religion is not the opium of the masses. Daily life is the opium of the masses.

True religion, which dares to acknowledge death and challenge the way we live, is an attempt to wake up.
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:35.0) Gecko/20100101 Firefox/35.0
Jack_L

Re: NoScript With Readability

Post by Jack_L »

Hi, i tried using rule you posted but it didn't works ether.......... And I am using bookmarklet
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
barbaz
Senior Member
Posts: 11143
Joined: Sat Aug 03, 2013 5:45 pm

Re: NoScript With Readability

Post by barbaz »

Jack_L wrote:And I am using bookmarklet
Which just injects <script> element into the page, so it will NOT work on script-disabled page, ever
*Always* check the changelogs BEFORE updating that important software!
Mozilla/5.0 (X11; NetBSD i386; rv:28.0) Gecko/20100101 Firefox/28.0 SeaMonkey/2.25
Guest

Re: NoScript With Readability

Post by Guest »

barbaz wrote:
Jack_L wrote:And I am using bookmarklet
Which just injects <script> element into the page, so it will NOT work on script-disabled page, ever
Then why readability writes in their page that it is possible? Why Thrawn wrote that this is possible??
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
barbaz
Senior Member
Posts: 11143
Joined: Sat Aug 03, 2013 5:45 pm

Re: NoScript With Readability

Post by barbaz »

It would work if you first (Temp-)Allow the site you want to use the boomarklet on

(BTW, please don't double post the same thing, rather let us know if you want something changed. I've deleted the first)
*Always* check the changelogs BEFORE updating that important software!
Mozilla/5.0 (X11; NetBSD i386; rv:28.0) Gecko/20100101 Firefox/28.0 SeaMonkey/2.25
User avatar
Thrawn
Master Bug Buster
Posts: 3106
Joined: Mon Jan 16, 2012 3:46 am
Location: Australia
Contact:

Re: NoScript With Readability

Post by Thrawn »

Guest wrote:Why Thrawn wrote that this is possible??
Actually, what I said was, Since they are advising you to uninstall the addon, that probably means that the addon is doing something in the page context.

So do you have problems using the addon on whitelisted sites? And with the addon installed, does anything appear on the NoScript menu that looks related to Readability?
======
Thrawn
------------
Religion is not the opium of the masses. Daily life is the opium of the masses.

True religion, which dares to acknowledge death and challenge the way we live, is an attempt to wake up.
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:35.0) Gecko/20100101 Firefox/35.0
Guest

Re: NoScript With Readability

Post by Guest »

Well i whitelisted readability.com. When i click "read now" on forbidenn addon in noscript menu it shows readability.com but nothing happens till i click "temporary allow all on this site"

P.S It would be nice if NoScript would have keyboard shortcut for - "Temporary allow all on site" then i could simply use AHK to fix this "problem." :)

P.P.S Oh and maybe i need to change something in embeddings to make bookmarklet work?
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
Guest

Re: NoScript With Readability

Post by Guest »

Sorry for frequent update - but it seems that instapaper works well even with domain forbidden! It's almost same app but fonts are bit worse.
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
barbaz
Senior Member
Posts: 11143
Joined: Sat Aug 03, 2013 5:45 pm

Re: NoScript With Readability

Post by barbaz »

Guest wrote:Well i whitelisted readability.com. When i click "read now" on forbidenn addon in noscript menu it shows readability.com but nothing happens till i click "temporary allow all on this site"
It's not sufficient to whitelist readability.com and the site you're visiting?
Guest wrote:P.S It would be nice if NoScript would have keyboard shortcut for - "Temporary allow all on site" then i could simply use AHK to fix this "problem." :)
So pick one! ;)

http://noscript.net/faq#qa3_11
about:config -> noscript.keys.tempAllowPage
Guest wrote:P.P.S Oh and maybe i need to change something in embeddings to make bookmarklet work?
:o I should hope not!
*Always* check the changelogs BEFORE updating that important software!
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:17.0) Gecko/20100101 Firefox/17.0
Post Reply