NoScript & Tumblr

[Cynyster]

Hello everyone.
I spent the last hour trying to figure out why I could not get the login page to Tumblr to render properly.
I have determined that it is indeed "NoScript" that is the issue.
Allowing scripts globally still does not correct the issue.
Only Disabling the NoScript plugin allows the login page to load properly.

With how configurable NoScript is I am certain that I am just missing how to set up NoScript to allow the site to work properly without giving up the protections of NoScript.

I am sure I am not the only one with this issue.
Can someone tell me what exceptions to allow in order for the login page to operate properly?

Thank you for your time.

[barbaz]

URL of the login page?
Does it require actually logging in (or trying to log in) to see the issue?

When this issue occurs, do you see anything related in the Browser Console? (Ctrl-Shift-J)
(if you don't know what's related, turn off CSS warnings and post everything else you see)

[Cynyster]

Hello
The login URL is https://www.tumblr.com/login
It doesn't require logging in.
The form fields for logging in seem to incorrectly displayed.


The page seems to have one of those scripts that do not allow you to enter the password until after the login is entered.
Similar to how Google services has their login.

This is what is looks like with NoScript Enabled
http://www.cynyster.com/Bad.jpg

This is what it is supposed to look like
http://www.cynyster.com/Good.jpg

Thanks for your reply

[barbaz]

WFM as soon as I Allow tumblr.com ...

Never saw the sort of "bad" in your screenshot.

[Cynyster]

WFM as soon as I Allow tumblr.com ...

Never saw the sort of "bad" in your screenshot.

It's the same on every one of my machines(5).
even if I have "Allow Scripts Globally (Dangerous)"

It seems a bit more basic / core of an issue to me.

[barbaz]

Well this is an odd one. Could you please post your list of extensions?

[Cynyster]

Well this is an odd one. Could you please post your list of extensions?

In order to test this I removed all my addons except NoScript 2.9.0.9 & RoboForm Toolbar 7.9.16.9

Again this strange occurance shows up even if NoScript is set to globally allow scripts.

yes very wierd

[barbaz]

RoboForm has been known to cause odd conflicts in the past, please try without that

[Cynyster]

Ok I wrote a very long post going through all the steps I went through to solve this issue
But apparently there is a time out on posting.

The problem apparently was my NoScript settings.
Resetting NoScript fixed the issue.
I still have the setting saved in case anyone is interested.

Njoy

[barbaz]

Thank you for saving the "bad" settings.
Can you please PM me a copy? Maybe we can find the root cause, so that you won't have to lose all of it.

[barbaz]

Thanks. I can reproduce the problem with those settings.

You have a number of user-modified default surrogate script that have since had more bugs fixed in them. I would suggest you upgrade NoScript to latest version and reset all of the default surrogates you modified. Your settings export indicates you maybe running NoScript 2.7...
(The specific fix here is to go to about:config and reset noscript.surrogate.ga.replacement which the older version you're running borked many sites after NoScript mostly canned its usage of __noSuchMethod__.)

(What is noscript.blockNSWB ?)

[Cynyster]

5th try (the first 4 was blocked by the spam filter (something in your reply I think))

You just blew out of my sphere of knowledge.
The only deliberate changes I have made was to tha XSS Tab under Advanced Options.
The couple of sites I was on, crossposted on purpose and I needed to allow it.
Other than that any changes I made were through the menus. (allow this site, disallow that site.. temporarily allow this page etc)

I had only saved the settings to make an attempt to sync the NoScript settings on the 6 machines I work from. To avoid having to redo all the settings on each machine.
Those settings are several years old so its probably best to dump them and start fresh.

What could you recommend that would help me sync my settings without falling prey to having outdated rules?

Thank you for your time.

[barbaz]

5th try (the first 4 was blocked by the spam filter (something in your reply I think))

If the spam filter gives you too much trouble you can PM an active Mod (me, GµårÐïåñ, therube, or Thrawn) and we'll try to post it for you. PMs to forum staff are not spam filtered, and the spam filter is more lenient on us.

What could you recommend that would help me sync my settings without falling prey to having outdated rules?

Well, first things first, what NoScript version are you actually running? Or are you syncing settings between different versions of NoScript?
Only the latest NoScript - including, to some extent, the default settings - is fully compatible with Firefox 45.
(NoScript cannot be expected to be forward-compatible; that isn't technically possible.)

Also note that when I was testing this, I imported your settings into NoScript 2.9.0.10rc1, so if you are really using an outdated NoScript it's possible some of what I saw as user-set preferences are actually just the old defaults.

[barbaz]

So, to put this a bit differently, maybe you could try this procedure to fix things back up?
(You already have a backup of your existing settings. Make sure you have that on hand before you start this, in case this goes wrong in some way.)

1) create a new profile, install only latest NoScript (you choose stable version or dev channel)
2) in your main profile, go to NoScript Options > Whitelist, export *only* the whitelist (*not* the export button on the very bottom). Your Untrusted list will also be exported in this step.
3) Copy the XSS settings you want to keep, paste them somewhere else for the moment (e.g. a text editor)
4) Go back to the new profile, and delete everything from the whitelist there (unless you want to have the default whitelist added to your whitelist)
5) Import the whitelist: use the Import button next to the Export button you used in (2)
6) Put back your XSS settings, click OK
7) Export that entire NS config

Now, on all the profiles you sync NS settings, reset NoScript then update NoScript to the latest version. Then restore the settings backup you made.

[Cynyster]

Ok that will work for me. I will just save it in my "setting folder" on my thumbdrive I take everywhere (Its the place I save all the setting for a variety of programs I use).

I always have the stable releases auto update. so at this writing its: 2.9.0.10

Thanks for all your help!!!!

I feel a donation incoming!