[RESOLVED]NoScript and https everywhere crash Firefox nightl

[yoshi]

( Copy and pasted from https everywhere issue tracker. https://github.com/EFForg/https-everywhere/issues/1352 )

I encountered a interaction between https-everywhere and noScript, which conspire to render Firefox nightly unusable when trying to play a youtube Video. ( I will also submit this bugreport to noScript, no idea where to fix this issue. )

Steps to reproduce

• Visit http://www.sfsignal.com/archives/2015/0 ... st-pixels/
  Open sidebar ( CTRL-H ) it seems to be important that the Video container is smaller than the player, such that the controls are partially occluded.
  Try to use the "Watch on youtube.com" button.
  Result: Firefox hangs.

Output of Firefox: https://gist.github.com/yoshi-k/2081ce69e7bd32a64413

Versions:

• Firefox nightly 40.0a1
  NoScript 2.6.9.20
  HTTPS Everywhere 5.0.1

  Code: Select all

  $uname -a
  Linux Angmar 3.19.2-1-ARCH #1 SMP PREEMPT Wed Mar 18 16:21:02 CET 2015 x86_64 GNU/Linux

[barbaz]

Visit http://www.sfsignal.com/archives/2015/0 ... st-pixels/

The board broke your link, please edit your post and replace the link wrapped in url tags so that doesn't happen, thanks.
(like this: )

Code: Select all

[url]link here[/url]

[yoshi]

Oh, sorry. The url is:

http://www.sfsignal.com/archives/2015/0 ... st-pixels/

[barbaz]

Can't reproduce in SeaMonkey nightly.

Do you have e10s enabled?
If you disable HTTPS Everywhere and put the HTTPS Everywhere rulesets into NoScript's Force HTTPS feature (NoScript Options > Advanced > HTTPS > Behavior), can you still reproduce the problem?

[yoshi]

With NoScript 2.6.9.21 the bug no longer appears at sfsignal, but I have seen it on reddit. I will try to build a test case on the weekend.

[yoshi]

I looked a bit into it again and have now updated to
FF nightly 40.0a1 (2015-04-10)
NoScript 2.6.9.21

First of all the sfsignal link still crashes the browser ( sorry for the misinformation
That was related to e10, with e10 enabled it works. ( It does not with e10 switched off.)

It also works, if NoScript's Clear Click is switched off. Hopefully interestingly, if I turn Clear Click off and then on again, it works until the end of the session but reverts to the old behavior, that is FF hangs, after a FF restart. ( If Clear Click needs a browser restart, it does not display a warning in about:addons.)

The browser also crashes when all rules in HTTPS everywhere are turned off.

Additionally I tried to build a test case, based on the assumption that the issue may be related to a youtube iframe inside of an too small div container, but in that case I could only get a warning, apparently from NoScript.
Testpage:
https://gist.github.com/yoshi-k/c159db8 ... tpage-html
http://bl.ocks.org/yoshi-k/c159db8c4a8b ... index-html ( Turns out one can host gists at github.)
Error message (console output):
https://gist.github.com/yoshi-k/377a0c3 ... 3-4-15-txt

[barbaz]

So it's not forcing HTTPS that's part of the trigger but something (else?) in HTTPS Everywhere itself.

I think with the info you've provided in your latest post I've offered all I can here atm, time for me to leave this bug report alone for the moment and let Giorgio investigate from here.

[yoshi]

Hi, just remembered to check this bug with the latest nightly version, 41.0a1 (2015-05-27) and apparently the issue is resolved there.