Nosscript not honoring auto top level domain allowed

[jcarerra]

Pages are opening almost universally as shown in the pic.
Hitting reload circle arrow results in the page loading.
I have tried it with Full and 2nd level top-level auto allowed checked.
How do I trace the cause of this?

[Thrawn]

Well, I believe DuckDuckGo has a scriptless version, but you might need to switch off the auto-allow to find it.

I'm guessing that the problem is something to do with DuckDuckGo trying to load pages in frames, but I'm not sure offhand.

[barbaz]

Don't know if this applies to you or not but this is known not to work if you have e10s enabled.

@jcarerra your search query is *not* obscured in that screenshot, and please don't post "spammy" links behind images (not accusing you of being a spammer, just please watch for that when copy-pasting forum embed code for an image).

[barbaz]

Also does upgrading NS to latest development build 2.7rc1 or latest release 2.7 make any difference?

EDIT Have you got Ghostery and/or Skype addon? Can't quite make out those other toolbar icons. Please post a list of all the extensions & plugins (with versions) that you have.

[jcarerra]

Wow, so much!
Here we go..

a. I have no idea what "e10s" is.

b. Where was the search query not obscured? I thought I had, although I really don't care if it is not.

c, I have no idea what you are referring to as a spammy link "behind" the image?

I uploaded the image to Lunapic, and there clicked to put it at imgur to get a public link, then used the public link.
Where did a spammy link come from; I don't see it; I don't know how it got there.

d. If NoScript 2.7 is the latest, I don't know why mine has not updated--it usually does. (I updated; still happens)
Not really into betas, but will if it comes to that.

e. Yes Ghostery, no Skype.

ABP 2 6 10
Bookmark Favicon Changer 2 28
Classic Theme Restorer 1 3 7 1
Click and clean 4 1 1
Custom Buttons 0 0 5 8 1
Disconnect 3 15 3 1
FEBE 8 7 1
Free download manager 2 0 19
Ghostery 5 4 9
Greasemonkey 3 3
Last tab close button 0 3 7 1
LastPass 3 2 40
Lazarus 2 3 1
Lightshot 4 6 8 1
Link visitor 4 0 1 1
Menu editor 1 2 7
NoScript 2 7
NoSquint 2 1 9 1
Searchload options 0 8 0 1
Site favicon in urlbar 8 1 1
Social Fixer 12.0
Stylish 2.0.2.1
Thumbnail zoom 3.7
Vacuum places 1.2.1

wow that took a long time

[therube]

As a test, create a new, clean Profile.
Install only NoScript.

Set your Temporarily top-level sites as wanted.

Test.


https://www.duckduckgo.com wasn't prompting me about JavaScript (when I had it disabled)?
And the results page was not showing ?q=searchterm ?

[barbaz]

Please don't post an entire post in huge font size! Thanks.

a. I have no idea what "e10s" is.

"Electrolysis" AKA multiprocess Firefox, available in Nightly & Aurora. If you don't know what it is then it probably doesn't apply to you

b. Where was the search query not obscured? I thought I had, although I really don't care if it is not.

Firefox title bar

c, I have no idea what you are referring to as a spammy link "behind" the image?

I uploaded the image to Lunapic, and there clicked to put it at imgur to get a public link, then used the public link.
Where did a spammy link come from; I don't see it; I don't know how it got there.

Basically the image was clicable link to lunapic's site. What makes that link "spammy" is that it wasn't a link to a larger version of the image or the like, not an "on-topic" link, and not even to the same site as is hosting the image. And you don't see it because it's gone now.
They probably gave you some code that looked something like this

Code: Select all

[url=<link address here>][img]<image-url-here>[/img][/url]

d. If NoScript 2.7 is the latest, I don't know why mine has not updated--it usually does. (I updated; still happens)
Not really into betas, but will if it comes to that.

The NoScript development builds are Release Candidates, not "betas" - and they aren't generally any less stable than the releases. I think that a lot of the reason for having two channels is to try to appease the people who think NS updates too frequently...

e. Yes Ghostery, no Skype.

Please disable Disconnect and Ghostery and see if your problem persists. Those two extensions are known for causing conflicts.
If that fails, and following therube's suggestion it works, please go back to your main profile and try Standard Diagnostic leaving NoScript enabled.

Let us know, thanks.

[barbaz]

(Am I going to have to edit every single one of everyone else's posts (except Thrawn's) in this thread??? )

[jcarerra]

Moving fast!
Ah. Title bar. Right. didn't even know Firefox did that.
Sorry about the font. I have eyesight issues, and I clicked it up but only one level in the popdown.

It still does it with Ghostery and Disconnect disabled.

It worked fine in the new profile.

[therube]

> s/Everything/NoScript/g

LOL, I did it again.
(Must be the trance music I'm listening too.)

> Electrolysis

Not sure, but don't think such a creature existed in FF 38.

> Basically the image was clicable link to lunapic's site.

I didn't see this particular image, but yeah some image hosting sites do stuff like that, & it sucks.
Even posting what should be "direct" links in [img] tags fails for some sites (including postimage,org, that I use). (And I used to use photobucket & tinypic before that, but they're both horrid now.)

[barbaz]

(Must be the trance music I'm listening too.)

offtopic: Please share (preferably by PM - unless, of course, jcarerra also likes Trance music), thanks

[jcarerra]

Well, I disabled every extension except NoScript and the problem still exists, so it is not an extension issue.

(Without my font change extensions, I can hardly even see this as I type--appears to be about 4-6pt)

Is there any clue as to what is happening in this:
-first open of site, script is blocked
...but as soon as...
-hit reload, and NoScript now has triggered the "scripts form this site are allowed"

Why does it work as expected on the SECOND load but not the first?

[therube]

> almost universally

Universally universal?
So when you load this site for the first time, it is not Allowed?
Or only when starting from a duckduckgo search from the search bar?


If you don't have any NoScript settings that you can't recreate (incl. whitelist, blacklist...), try a NoScript | Options | Reset, then reset your Temporarily allow top-level sites option, & see if that makes a difference?


Otherwise, something like, copy, complete, your existing Profile, make sure it fails, then do a NoScript Reset in there & test.


Seems the search bar generates a query like: https://duckduckgo.com/?q=everything.
That formatrequires JavaScript to get the results.

Where if you just go to https://duckduckgo.com/ & use their search box (without JavaScript), you end up with a query like: https://duckduckgo.com/html/?q=everything (though the urlbar will only show https://duckduckgo.com/html once the query has been effected).

[barbaz]

I would suggest instead as a next troubleshooting step that you Export your NS config from your main profile and import it into a clean profile with only NS installed (as above).
NoScript Options > Export (the one *on the very bottom* of NS Options, *not* the one unique to the Whitelist panel)
NoScript Options > Import (again, the one *on the very bottom*)

Does it still work in the new profile? If so, then follow therube's advice about doing a NS reset; if not, try "incrementally" copying your data to a new profile and see at what point it stops working (if at all) in the new profile: http://kb.mozillazine.org/Transferring_ ... _-_Firefox
If the problem remains gone even with all important data copied over, your profile probably is corrupt somehow.

[jcarerra]

therube did bring up a point that I needed to check.., that is,
the phenomenon when going to dudkuckgo from the url bar as opposed to typing s search term into the search bar on the Firefox new page screen.

Sure enough, it worked doing the former but not the latter.
More playing around.

And I feel dumb...

Even though the image in post 1 shows it, I never clicked ALLOW. I was always going to the site by searching from the 'new' screen bar, then clicking the reload button to get the page to load. That way, the Allow button didn't get offered as the page did load at the reload step.

Now that I have clicked Allow, I think everything works first time. It still leaves the question of why the automatically allow top level domains does not "kick in" until the page reload is done, but my operational problem is solved.

A further question I do not wish to pursue is how somewhere in the past week that dudkuckgo lost its previous authorization of being allowed.

So, operationally I am good to go. I truly appreciate all the advice and help here.

Merry Christmas or Happy Holiday, whichever you prefer.