On certain sites I need to disable NoScript completely.

[dma]

Hello,
I was wondering if there is a way to, for example, watch MSNBC live without having to disable NoScript.
I tried many different setting combinations but the only way it works is disabling it. It also happened with other sites which I can't remember right now.
Allowing all scripts doen't work either.
Thanks.

[barbaz]

When this issue occurs, do you see anything related in the Browser Console? (Ctrl-Shift-J)
(if you don't know what's related, turn off CSS warnings and post everything else you see)

[dma]

Hi barbaz,
Thank you for the reply. Here is what I got having allowed all scripts on that site:

http://pastebin.com/1KEwDhZB

[barbaz]

Code: Select all

[NoScript] Blocking cross-site Javascript served from http://tve-common.nbcuni.com/web/esi/geo.xml with wrong type info application/xml and included by http://player.theplatform.com/p/HNK2IC/msnbc_live_p3?mbr=true&autoPlay=false&MVPDid=TWC#playerurl=http%3A//www.msnbc.com/NOW

Let's try working around this and see if it "fix" the problem?
about:config > noscript.inclusionTypechecking.exceptions
add on the end, separated by a single space

Code: Select all

tve-common.nbcuni.com/*/geo.xml

(Maybe other scripts will be blocked by the cross-site MIME type checker. If this not work please re-check the console for similar messages to the one I re-posted above.)

Note: I have *no* idea how safe making exception for this is!

[Thrawn]

I don't really know anything about nbcuni.com, but I don't think it's prone to the same kinds of public alteration as Github repositories?

It's pretty weird that a resource called "geo.xml" and served with "application/xml" content type is being included as a script, though.

[barbaz]

@amadeus: your posts are split to viewtopic.php?f=7&t=21681

[dma]

@barbaz
It worked! Adding that line to the exceptions made it work right away.
I had no idea how to do that. Now I can apply the same method to other sites with this same issue.
Thank you!

[barbaz]

You're welcome!

Not marking this solved until someone gives a more definite indication of how safe that is.