humblebundle.com and youtube.com IFRAME and flash fun

[bizaff]

So.

1. I go to humblebundle.com (no Blocked Objects yet) .
2. I click on one of the games, which brings up a youtube frame that noscript blocks. I have "Apply these restrictions to whitelisted sites too" and blocking everything.
3. I click on it, the page reloads, the frame goes away.
4. I click on the game again, THEN I get the youtube movie waiting to be played (allegedly).
5. I click on it, and it loads a THIRD blocked thing
6. I click on that, and I get the youtube movie waiting to be played, for real.
7. I click on it and it starts.

That's a lot of clicking.

After 2 I have a Blocked Object

Code: Select all

<IFRAME>@https://www.youtube.com/blahblahblah

After 5 I have another Blocked Object

Code: Select all

shockwave-flash@https://s.ytimg.com/yakyakyak

I figured fixing this would be pretty easy. I was wrong.

I tried fixing 2 by adding

Code: Select all

FRAME@https://www\.youtube\.com/

That didn't work.

I did some poking around and found viewtopic.php?f=23&t=12897#p49589 - I interpret the advice there to add

Code: Select all

application/x-unknown <IFRAME>@https://www\.youtube\.com

That worked, but the space made me a bit suspicious. I changed it to

Code: Select all

application/x-unknown <IFRAME>@https://www\.mootube\.com

and it still allowed the frame. The space looks like it allows for all sites, which is NOT what I want.

Finally after mucking around for another 20 minutes

Code: Select all

FRAME@https://www\.youtube\.com

worked for 2. Why? It appears if the NoScript dialog is open, it doesn't bother reading from noscript.allowedMimeRegExp until it's closed.

Then I tried fixing 5. I added

Code: Select all

application/x-shockwave-flash@https://s\.ytimg\.com/

to noscript.allowedMimeRegExp which didn't work, then I tried

Code: Select all

application/shockwave-flash@https://s\.ytimg\.com/

which I wasn't expecting to work, and it didn't.

What am I missing here?

[barbaz]

Are you missing anything? You got it working, no? I can try to expound on what I think is going on there but I'm still not understanding the problem.

I tried fixing 2 by adding

Code: Select all

FRAME@https://www\.youtube\.com/

That didn't work.

Because of the trailing / ? viewtopic.php?f=7&t=17879

I did some poking around and found viewtopic.php?f=23&t=12897#p49589 - I interpret the advice there to add

Code: Select all

application/x-unknown <IFRAME>@https://www\.youtube\.com

That worked, but the space made me a bit suspicious.

Good instinct. You are allowing MIME type "application/x-unknown" from all sites and MIME type "<IFRAME>" from https://www.youtube.com .

Finally after mucking around for another 20 minutes

Code: Select all

FRAME@https://www\.youtube\.com

worked for 2. Why?

See above.

Then I tried fixing 5. I added

Code: Select all

application/x-shockwave-flash@https://s\.ytimg\.com/

to noscript.allowedMimeRegExp which didn't work, then I tried

Code: Select all

application/shockwave-flash@https://s\.ytimg\.com/

which I wasn't expecting to work, and it didn't.

Again, try dropping the trailing / - see the above linked forum topic, allowedMimeRegExp works on sites (meaning, path isn't involved), *not* URLs. http://example.net is a site; http://example.net/ is a URL (example.net at path / ).

[bizaff]

Bah, stupid sorta regular expressions. I play with regex URL, I expect trailing slash. I move to silently ignore trailing slash.. seconds?

My claim of the Options Dialog being open is probably wrong.

Striking the trailing slash was it, thanks for the review.

[barbaz]

That Guest post was from bizaff so I've changed authorship.
@bizaff, remember to log in (if possible) so that you don't need to solve the CAPTCHA every time & to make it easier to keep track of who's who in a thread.

And you're welcome, glad that post was helpful.