[FIXED 2.9.0.6] 2.9.0.5 broke access to google fonts

Ask for help about NoScript, no registration needed to post
pastic

[FIXED 2.9.0.6] 2.9.0.5 broke access to google fonts

Post by pastic »

NoScript (great extension!!) just updated and it broke access to googlefonts for a site I am developing locally. I have been working on it for a week and the font has loaded all the time. Now after working several hours this morning I restarted Firefox and was greeted by the update info page for NoScript. And suddenly the googlefont can't be downloaded anymore. If I disable NoScript the font is downloaded.

Was this an intentional change?

Inspection message:

Code: Select all

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at http://fonts.gstatic.com/s/librebaskerville/v4/pR0sBQVcY0JZc_ciXjFsK6Ucnt8gjcHpqyffjHeZWDA.woff2. (Reason: CORS header 'Access-Control-Allow-Origin' missing). 

downloadable font: download failed (font-family: "Libre Baskerville" style:normal weight:normal stretch:normal src index:2): bad URI or cross-site access not allowed source: http://fonts.gstatic.com/s/librebaskerville/v4/pR0sBQVcY0JZc_ciXjFsK6Ucnt8gjcHpqyffjHeZWDA.woff2
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:44.0) Gecko/20100101 Firefox/44.0
OldLodgeSkins

Re: 2.9.0.5 broke access to google fonts

Post by OldLodgeSkins »

I've just noticed the exact same behavior, also with a Google font... I've been working on that website for a week now and the two Google fonts I'm using in it were working just fine. NoScript says it blocked an XSS attempt.
I'm trying to add an XSS exception but I'm no good with regex...
Mozilla/5.0 (X11; Linux x86_64; rv:44.0) Gecko/20100101 Firefox/44.0
pastic

Re: 2.9.0.5 broke access to google fonts

Post by pastic »

I just disabled NoScript.
I probably wont re-enable it until I am done with the site in question.
Which is sad, because I like to browse the web with NoScript when I am not coding.
I hope the devs will chime on with a word on this issue.
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:44.0) Gecko/20100101 Firefox/44.0
sonicsix

Re: 2.9.0.5 broke access to google fonts

Post by sonicsix »

Same issue here, killed Google fonts. Please re-enable or give us the option to.
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0
jbob12

Re: 2.9.0.5 broke access to google fonts

Post by jbob12 »

Same here, google fonts only load with noscript disabled
Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0
barbaz
Senior Member
Posts: 10841
Joined: Sat Aug 03, 2013 5:45 pm

Re: 2.9.0.5 broke access to google fonts

Post by barbaz »

Does downgrading NoScript to a version where this was known to work, actually get it back working?
If so, what is the last working rc version?

Old NoScript @
https://addons.mozilla.org/addon/noscript/versions
*or*
https://noscript.net/feed?c=100&t=a
*Always* check the changelogs BEFORE updating that important software!
-
Final

Re: 2.9.0.5 broke access to google fonts

Post by Final »

Same error here. I just updated NoScript today (never had any prior issues with Google Fonts). Both of my websites use custome Google Fonts, however they will not load at all anymore unless I disable NoScript entirely (not something I feel comfortable doing when browsing the internet). Any chance of a hotfix?
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0
pastic

Re: 2.9.0.5 broke access to google fonts

Post by pastic »

barbaz wrote:Does downgrading NoScript to a version where this was known to work, actually get it back working?
If so, what is the last working rc version?
Just tried rolling back.
Version 2.9.0.5rc2 is that last one that works.
Version 2.9.0.5rc3 breaks google fonts.
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:44.0) Gecko/20100101 Firefox/44.0
barbaz
Senior Member
Posts: 10841
Joined: Sat Aug 03, 2013 5:45 pm

Re: 2.9.0.5 broke access to google fonts

Post by barbaz »

Thank you for reporting your findings. We have a lot of threads here about 2.9.0.5 breaking things...
*Always* check the changelogs BEFORE updating that important software!
-
vpoint
Posts: 7
Joined: Thu Aug 15, 2013 8:19 pm

NoScript 2.9.0.5 breaks Google Fonts

Post by vpoint »

build 2.9.0.5 breaks many large sites that use Google Fonts

Browser console shows Firefox bad URI for fonts.gstatic.com even with NoScript XSS turned off
No Google Fonts load

Fix: downgrade to 2.9.0.4 and turn off auto-update.
Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0
PPNSteve

Re: 2.9.0.5 broke access to google fonts

Post by PPNSteve »

Its breaking other Google API calls as well thus breaking my WP post editing and page viewing ability.

[NoScript InjectionChecker] JavaScript Injection in ///u/0/se/0/_/ 1/fastbutton?usegapi=1&size=medium&hl=en&origin=http://www.[website].com&url=http://www.[website].com/?p=31917&gsrc=3p&ic=1&jsh=m;/_/scs/apps-static/_/js/k=oz.gapi.en.W5w9FDjqfRM.O/m=__features__/am=AQ/rt=j/d=1/rs=AGLTcCNDePu8MnLgpAM5USOnhNImDn9cnA#_methods=onPlusOne,_ready,_close,_open,_resizeMe,_renderstart,oncircled,drefresh,erefresh,onload&id=I0_1458288817041&parent=http://www.[website].com&pfname=&rpctoken=20719038
(function anonymous() {
_methods=onPlusOne,_ready,_close,_open,_resizeMe,_renderstart,oncircled,drefresh,erefresh,onload /* COMMENT_TERMINATOR */
DUMMY_EXPR
})

[NoScript XSS] Sanitized suspicious request. Original URL [https://apis.google.com/u/0/se/0/_/+1/fastbutton?usegapi=1&size=medium&hl=en&origin=http%3A%2F%2Fwww.[website].com&url=http%3A%2F%2Fwww.[website].com%2F%3Fp%3D31917&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en.W5w9FDjqfRM.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCNDePu8MnLgpAM5USOnhNImDn9cnA#_methods=onPlusOne%2C_ready%2C_close%2C_open%2C_resizeMe%2C_renderstart%2Concircled%2Cdrefresh%2Cerefresh%2Conload&id=I0_1458288817041&parent=http%3A%2F%2Fwww.[website].com&pfname=&rpctoken=20719038] requested from [http://www.[website].com/?p=31917&pagefrog_preview=fbia&preview=true]. Sanitized URL: [https://apis.google.com/#1731787890023957460].
Mozilla/5.0 (Windows NT 5.1; rv:45.0) Gecko/20100101 Firefox/45.0
User avatar
Giorgio Maone
Site Admin
Posts: 9454
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: 2.9.0.5 broke access to google fonts

Post by Giorgio Maone »

Please check latest development build 2.9.0.6rc1, thanks.
Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0
JPL
Posts: 7
Joined: Wed Oct 07, 2015 10:05 am

Re: 2.9.0.5 broke access to google fonts

Post by JPL »

For my websites at least, the Google fonts problem in 2.9.0.5 has been fixed in 2.9.0.6rc1.

Many thanks for prompt response.

JPL
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0
vpoint
Posts: 7
Joined: Thu Aug 15, 2013 8:19 pm

Re: 2.9.0.5 broke access to google fonts

Post by vpoint »

fixed in 2.9.0.6 for me ( Firefox ESR 38.7.1)
Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0
pastic

Re: 2.9.0.5 broke access to google fonts

Post by pastic »

2.9.0.6 works here as well.
Ottimo!

Thanks for the quick fix!
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:44.0) Gecko/20100101 Firefox/44.0
Post Reply