Sites Broken by Last Update

Ask for help about NoScript, no registration needed to post
Dougal666

Sites Broken by Last Update

Post by Dougal666 »

The update from a few days ago broke a whole bunch of (whitelisted) sites for me...

Some examples:
- If you go to some VeeHD link (eg http://veehd.com/video/4908901_Joe-Kidd-1972-720p-Re-Up ), the "Download" button won't do anything.
- Trying a search in eXbmc (http://exbmc.com/) doesn't work.
- If I go to my FileFactory account, the file browser ("My Files") doesn't work.
- Trying to upload a subtitle to subscene.com won't work (file chooser won't open).

Mighty irritating, this is...

Dougal
Mozilla/5.0 (Windows NT 6.1; rv:39.0) Gecko/20100101 Firefox/39.0
User avatar
therube
Ambassador
Posts: 7979
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: Sites Broken by Last Update

Post by therube »

> The update from a few days ago

What version?
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 5.1; rv:36.0) Gecko/20100101 SeaMonkey/2.33.1
barbaz
Senior Member
Posts: 11142
Joined: Sat Aug 03, 2013 5:45 pm

Re: Sites Broken by Last Update

Post by barbaz »

Is there any disallowed "googleapis.com" subdomain in your NoScript menu and if so which?
*Always* check the changelogs BEFORE updating that important software!
-
Dougal666

Re: Sites Broken by Last Update

Post by Dougal666 »

This is version 2.6.29.9 with the latest Firefox-Win7-32.
barbaz wrote:Is there any disallowed "googleapis.com" subdomain in your NoScript menu and if so which?
Yes, ajax.googleapis.com, but I never allowed that or google-analytics.
Is it new? Whitelisting it actually seems to fix the problem

Thanks.
Mozilla/5.0 (Windows NT 6.1; rv:39.0) Gecko/20100101 Firefox/39.0
barbaz
Senior Member
Posts: 11142
Joined: Sat Aug 03, 2013 5:45 pm

Re: Sites Broken by Last Update

Post by barbaz »

The entire googleapis.com was in the default whitelist but it was removed recently due to changes in the googleapis.com domain structure making that no longer safe. The whitelist is narrowed down to ajax.googleapis.com and maps.googleapis.com, but (I think due to a bug) if you had set about:config > noscript.allowWhitelistUpdates to false then googleapis would have been removed without these replacements being added back.

(You might be interested to follow viewtopic.php?f=10&t=20997 to see other subdomains of googleapis.com which you may need to whitelist to make something work. I'm planning to keep posting there as I run into more.)
*Always* check the changelogs BEFORE updating that important software!
-
Post Reply