Clickjacking protection is faulty on 60fps videos

[Terminator]

I've been using NoScript for a couple of years now without issue but since Firefox 45 came out, the option to untick the "Keep this element locked" box has been disabled whilst actively watching Full Screen 60fps videos on the internet and only works when the video has finished/is paused or is in normal viewing mode . I had hoped that the latest round of patches for both NoScript and Firefox would fix the problem but they haven't.

[therube]

URL to 60fps video?

Where do you find "Keep this element locked" ?

[Terminator]

The videos in the middle section of this page are all 60fps : http://www.gamecity.ne.jp/doax3/gallery.html and the box in question appears in the top - middle of the screen. This problem only shows up on insecure sites like the one I posted above, Youtube itself is unaffected.

[therube]

> The videos in the middle section

So what, the nicovideo.jp links?
Like, http://www.nicovideo.jp/watch/1458262753

(They make you jump through hoops. Need a login to allow Full Screen, & then once logged in, they want "Premium" or something or the other, cause too much traffic is being used.

The login part I got past, but not the Premium & therefor "60fps".)


> the box in question appears in the top - middle of the screen

Still not sure what you mean by that.
The only box I see is at the bottom, 'Customize | Comments | Comment'.
Is it a NoScript setting?

[Terminator]

No, not the Nico links - the videos above them e.g. these:



and this is the box I'm talking about :

[barbaz]

and this is the box I'm talking about :

That looks unfocused not disabled...

[Terminator]

No matter how hard you click on the tick box, it won't let you untick it until the video ends . The only videos that suffer from this glitch are the 60fps ones on insecure sites, anything that's actually on Youtube will work just fine.

[barbaz]

Do you have Flash player?

[Termiantor]

Yes and it's fully updated . I'll try disabling it and see what happens.

[Terminator]

Disabling it has made no difference .

[barbaz]

Can you click OK on the clickjacking dialog?
If not, open Scratchpad (Tools > Web Developer > Scratchpad), and while the video playing, instead of triggering clickjacking warning, type or paste this code then click Run:

Code: Select all

window.setTimeout(function(){alert('Foo foo foo foo.');},0);

It pops up a dialog box (pseudo-async, to minimize chances of disrupting page code).
Are you able to dismiss that before the video ends?

[Terminator]

1: No, that's locked out as well .

2: I tried that but all I get is an error message that means nothing to me :

/*
Exception: SyntaxError: missing ; before statement
@Scratchpad/1:9
*/

This dialogue box I'm having trouble with only shows up when the video is Full Screen mode so I can't access Scratchpad without minimizing the video .

[barbaz]

2: I tried that but all I get is an error message that means nothing to me

It works for me, are you sure you entered it correctly?
(That error means invalid code.)

Maybe see if you can get it working with a Scratchpad opened on *this* page first.

This dialogue box I'm having trouble with only shows up when the video is Full Screen mode so I can't access Scratchpad without minimizing the video .

In that case, change the 0 to, say, 4000 (which make the alert not happen for 4 seconds), so that you have time to go fullscreen after running the code and before the alert box?

[Terminator]

I've sort of got it working but if I don't quite make it, then either the Foo foo foo foo or Clickjacking protection dialogue boxes show up and can't be closed until the video ends .

[therube]

For me, the Clickjacking was hit or miss, & more miss then hit.

Anyhow, I was able to uncheck the dialog white the clip was playing.




(Hmm. I didn't think postimg.org resized pictures [that is the setting I used] but they surely did. My source was 1938x3363. What it shows certainly is not. That sucks.)