NoScript (great extension!!) just updated and it broke access to googlefonts for a site I am developing locally. I have been working on it for a week and the font has loaded all the time. Now after working several hours this morning I restarted Firefox and was greeted by the update info page for NoScript. And suddenly the googlefont can't be downloaded anymore. If I disable NoScript the font is downloaded.
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at http://fonts.gstatic.com/s/librebaskerville/v4/pR0sBQVcY0JZc_ciXjFsK6Ucnt8gjcHpqyffjHeZWDA.woff2. (Reason: CORS header 'Access-Control-Allow-Origin' missing).
downloadable font: download failed (font-family: "Libre Baskerville" style:normal weight:normal stretch:normal src index:2): bad URI or cross-site access not allowed source: http://fonts.gstatic.com/s/librebaskerville/v4/pR0sBQVcY0JZc_ciXjFsK6Ucnt8gjcHpqyffjHeZWDA.woff2
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:44.0) Gecko/20100101 Firefox/44.0
I've just noticed the exact same behavior, also with a Google font... I've been working on that website for a week now and the two Google fonts I'm using in it were working just fine. NoScript says it blocked an XSS attempt.
I'm trying to add an XSS exception but I'm no good with regex...
Mozilla/5.0 (X11; Linux x86_64; rv:44.0) Gecko/20100101 Firefox/44.0
I just disabled NoScript.
I probably wont re-enable it until I am done with the site in question.
Which is sad, because I like to browse the web with NoScript when I am not coding.
I hope the devs will chime on with a word on this issue.
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:44.0) Gecko/20100101 Firefox/44.0
Same error here. I just updated NoScript today (never had any prior issues with Google Fonts). Both of my websites use custome Google Fonts, however they will not load at all anymore unless I disable NoScript entirely (not something I feel comfortable doing when browsing the internet). Any chance of a hotfix?
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0
barbaz wrote:Does downgrading NoScript to a version where this was known to work, actually get it back working?
If so, what is the last working rc version?
Just tried rolling back.
Version 2.9.0.5rc2 is that last one that works.
Version 2.9.0.5rc3 breaks google fonts.
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:44.0) Gecko/20100101 Firefox/44.0