Etsy.com issues

[eckokitten]

Hello. I was having a huge issue on the website etsy (and only that site). Every single time I went there I was getting major site lag. Every single page load there would be a long pause & sometimes got a message saying firefox was not responding.

I was fine using a different browser but as I prefer firefox it was really aggravating. I sell and shop on etsy and so it requires lots of flipping through images/pages which was impossible.

With help on the firefox forums, I turned off all of my addons and turned on each one, one at a time to see what the problem was. No Script apparently was the issue as it is fine when I have it turned off.

I looked online and other people were having the same issue.

I had the etsy site allowed for everything so idk what the issue was.

[barbaz]

When it happens, do you see anything related in the Browser Console? (Ctrl-Shift-J)
(if you don't know what's related, turn off CSS warnings and post everything else you see)

[tirsden]

I have this problem as well, and it's coming up as a potential cross-site scripting attempt. As the previous poster mentioned, it lags every single page out and sometimes kills the browser entirely (via indefinite "not responding"). I updated Noscript when this problem started a few months ago and again more recently (could probably do it again but the problem has persisted), and Firefox is up to date. Etsy.com is whitelisted in Noscript. Here's what the console gives me for the main etsy.com page:

Code: Select all

"Is code your craft? https://www.etsy.com/careers" search:3260:20
ExternalEventService: can't communicate with secretary pandora.js:72:290
jPlayer error (count: 0): Media URL could not be loaded. pandora.js:72:290
"Is code your craft? https://www.etsy.com/careers" www.etsy.com:2427:20
This site makes use of a SHA-1 Certificate; it's recommended you use certificates with signature algorithms that use hash functions stronger than SHA-1.[Learn More] connect.facebook.net
no element found beacon:1:1
This site makes use of a SHA-1 Certificate; it's recommended you use certificates with signature algorithms that use hash functions stronger than SHA-1.[Learn More] c.go-mpulse.net
Use of getPreventDefault() is deprecated.  Use defaultPrevented instead. require-jquery-1.8.2.20151016163844.js:46:0
[NoScript InjectionChecker] JavaScript Injection in ##{"https://":{"b":{"log.etsy.com/en/files/2015/11/":{"hide-and-home-SMALL.jpg":"1h6,e7","personalized-soap-diy-small.jpg":"1ha,e4","tree-change-header1-small1.jpg":"1hb,e3"},"cn.etsy.com/beacon?":{"p":{"hp_ab_var_names=on;on;on;off;off;off;off;off;off;off;off;on;off;on;on;both;on;off;off;off;on;on;on;off;on;on;off;on;off;off;on;off;off;off;on;off;ineligible;on;on;on;on;on;off;on;on;on;on;on;on;on;on;on;three_per;eu_style;off;off;on;on;on;on;on;control;on;off;off;off;off;off;on;on;off;ineligible;ineligible;off;mpulse;off;on;off;off;on;on&php_ab_selector_names=x;x;x;x;x;x;x;w;x;x;x;x;x;x;x;x;x;x;x;w;x;x;x;x;x;x;x;x;w;x;x;x;x;x;w;x;e;x;x;x;x;x;x;x;x;x;x;x;x;x;x;x;x;w;x;x;x;x;x;x;x;x;x;x;w;x;w;w;x;x;x;e;e;w;w;x;w;w;w;w;w&":{"viewport_width=1249&viewport_height=785&screen_height=1080&screen_width=1920&device_pixel_ratio=1&request_start=1447463976409&response_start=1447463976735&response_end=1447463976747&.version=0&.ref=&.page_guid=d2a23c
[NoScript XSS] Sanitized suspicious upload to [https://36eb5555.mpstat.us/###DATA###%7B%22https%3A%2F%2F%22%3A%7B%22b%22%3A%7B%22log.etsy.com%2Fen%2Ffiles%2F2015%2F11%2F%22%3A%7B%22hide-and-home-SMALL.jpg%22%3A%221h6%2Ce7%22%2C%22personalized-soap-diy-small.jpg%22%3A%221ha%2Ce4%22%2C%22tree-change-header1-small1.jpg%22%3A%221hb%2Ce3%22%7D%2C%22cn.etsy.com%2Fbeacon%3F%22%3A%7B%22p%22%3A%7B%22hp_ab_var_names%3Don%253Bon%253Bon%253Boff%253Boff%253Boff%253Boff%253Boff%253Boff%253Boff%253Boff%253Bon%253Boff%253Bon%253Bon%253Bboth%253Bon%253Boff%253Boff%253Boff%253Bon%253Bon%253Bon%253Boff%253Bon%253Bon%253Boff%253Bon%253Boff%253Boff%253Bon%253Boff%253Boff%253Boff%253Bon%253Boff%253Bineligible%253Bon%253Bon%253Bon%253Bon%253Bon%253Boff%253Bon%253Bon%253Bon%253Bon%253Bon%253Bon%253Bon%253Bon%253Bon%253Bthree_per%253Beu_style%253Boff%253Boff%253Bon%253Bon%253Bon%253Bon%253Bon%253Bcontrol%253Bon%253Boff%253Boff%253Boff%253Boff%253Boff%253Bon%253Bon%253Boff%253Bineligible%253Bineligible%253Boff%
TypeError: invalid 'instanceof' operand scc[j] ClearClickHandler.js:278:6
about:blank : Unable to run script because scripts are blocked internally. <unknown>
TypeError: invalid 'instanceof' operand scc[j] ClearClickHandler.js:278:6
Overriding failed (2147500037) redirect callback for 12: http://audio-ch1-t2-2-v4v6.pandora.com/access/?version=4&lid=5778186&token=5JFhz5d6yoobcQzrZW8aw2eE3gdkkoE9nhHCrbg9ExEx9tBM3rv0qg10awTPi%2Bl2W4A696X8DwWj8qnEXhkG24nC9joz2qCSzsmJ0VXrI0%2FjG5y6MUfRz2I4dxJs1amfgWZxX9KAt3CaAgf0whAt3g6xDuMCJ9Ax%2B1EmJnDT%2FrlGMj85JDdDrHpZZU7l8JgZtH%2BPaxaa3E6BXP48Q11rmt09BONI%2B9NR7h1KCy9svZCPdjDQbuuQyDW9c2873VCbUkta2I1rTh7oGOgpuT4LkkSk6lKyJAdMXxbRAFqbgH2wQKozGUHRUyBws67E1w53pVTOKcya%2FjC6TfvlalDwYxuQWzewRDnq7l4Li6cr0drdUoqK3GdQi%2BWrnhGiE3TwP4rTymJ5hak%3D -> http://audio-ch1-t2-2-v4v6.pandora.com/access/?version=4&lid=5778186&token=5JFhz5d6yoobcQzrZW8aw2eE3gdkkoE9nhHCrbg9ExEx9tBM3rv0qg10awTPi%2Bl2W4A696X8DwWj8qnEXhkG24nC9joz2qCSzsmJ0VXrI0%2FjG5y6MUfRz2I4dxJs1amfgWZxX9KAt3CaAgf0whAt3g6xDuMCJ9Ax%2B1EmJnDT%2FrlGMj85JDdDrHpZZU7l8JgZtH%2BPaxaa3E6BXP48Q11rmt09BONI%2B9NR7h1KCy9svZCPdjDQbuuQyDW9c2873VCbUkta2I1rTh7oGOgpuT4LkkSk6lKyJAdMXxbRAFqbgH2wQKozGUHRUyBws67E1w53pVTOKcya%2FjC6TfvlalDwYxuQWzewRDnq7l4Li6cr0drdUoqK3GdQi%2BWrnhGiE3TwP4rTymJ5hak%3D - 2
TypeError: invalid 'instanceof' operand scc[j] ClearClickHandler.js:278:6
about:blank : Unable to run script because scripts are blocked internally. <unknown>

[Giorgio Maone]

Is "mpstats.us" (a tracker) allowed?
If it is, forbid it.
If it's not, mark it as untrusted.
Good luck and let me know.

[barbaz]

@tirsden: Please post console messages inside code tags, otherwise the board turns URLs in the messages into live links which may later be subject to truncation. It's also easier to read that way.
(I've fixed it for you this time)

[tirsden]

Ah yeah, sorry! Thanks for fixing it. ^_^

And yes, that site was whitelisted so I have taken it off the whitelist. Is there a way to add it permanently to untrusted sites? I can't find an option to do that, and all I'm finding on google is to allow all scripts and then go to the offending site and forbid it. I would rather not do that. O.o

Meanwhile Etsy is now working fine, thank you. ^__^

[barbaz]

If you have no "Untrusted" sub-menu, first select to show it: NS Options > Appearance, check "Untrusted"
Then when you see the site in the NS menu, go to the Untrusted sub-menu and click "Mark [site] as Untrusted".

[tirsden]

Ah cool, Untrusted was already checked and while my Noscript wasn't very outdated, I updated it and that may have helped. It seems that particular tracker URL doesn't exist by itself (I tried going there after all just to get it out of the way) and won't let me mark it untrusted, so I'll have to keep an eye out for other pages trying to load stuff from it and see if I can mark it that way.

Sorry for the late reply, Fallout 4 ate me. ^^;; Thank you all for your help! ^_^