Can't log into banking site

[dubwai]

I think it's been a few weeks now but I am unable to log into my banking website (mtb.com) with noscript enabled since a recent update. I can log in without noscript. I have allowed my banking domain permanently and the noscript dropdown shows no blocked domains. Only after I type in my username and password and hit enter, I get redirected back to the same login page again and the noscript bar appears at the bottom of firefox: "Scripts Partially Allowed, (1/4 mtb.com) | <SCRIPT>: 29 | <OBJECT>: 0" When I click the Options button, the dropdown allows me to: "Allow Scripts Globally", "Revoke Temporary Permissions", or "Forbid mtb.com" along with the generic options. When I select 'Options...' from the options menu I click through the tabs but nothing is jumping out at to tell me what the issue is or how to get around it.

I really would prefer to keep noscript enabled but this is becoming an issue as I pay all my bills online. Can anyone help me understand what the issue is and how to fix it? I've enabled the domain mtb.com. Why are scripts from that domain still blocked. Is the website doing something irresponsible? What's going on here?

thanks in advance.

-James

[barbaz]

According to that notification, there are 3 domains from which script are still forbidden. Please go to NoScript Options > Appearance and check "Full Domains", then post here A) a screenshot of the NoScript menu on that site with Untrusted sub-menu open, and B) a screenshot of the menu with Blocked Objects sub-menu open (if it's present).

EDIT And indeed I see 4 domains there when I Allow mtb.com:

Code: Select all

-csdata1.com
-dsa.csdata1.com
+mtb.com
!google-analytics.com
!monetate.net

(+ means Allowed, - means Forbidden, ! means Untrusted)

EDIT2 Hmm, all of those 3rd-party domains are trackers... surrogate script needs added or changing?

[dubwai]

Thanks for your help. I enabled the full domains and refreshed (I had to attempt to log in again to get the Options at the bottom) but I see nothing different. I then enabled the full addresses option too and did the same. Nothing.

That's what's so funny about this. I don't see an untrusted sub-menu at all. I know what you are talking about, I've been using NoScript for at least 10 years. I'm at a loss as to how to upload pictures here. I'm trying to upload them (with no success) to an image hosting site. Once I figure that out, I will paste the links here.

[dubwai]

OK finally got something uploaded:

[barbaz]

So, in NoScript Options > Appearance, are enabled all of "Allow [...]", "Temporarily allow [...]", and "Untrusted"?

[therube]

As a test, create a new, clean Profile
Install only NoScript
Load https://www.mtb.com

Allow 'mtb.com'
Attempt your login

Now that it work...

Have you tried with all other extensions disabled?
Do you have redirects blocked?
Anything related show up in Error Console?

[dubwai]

So, in NoScript Options > Appearance, are enabled all of "Allow [...]", "Temporarily allow [...]", and "Untrusted"?

Yep. I've enabled everything on that tab at this point.

[dubwai]

As a test, create a new, clean Profile
Install only NoScript
Load https://www.mtb.com

Allow 'mtb.com'
Attempt your login

Now that it work...

Have you tried with all other extensions disabled?
Do you have redirects blocked?
Anything related show up in Error Console?

That seems to work. Interestingly now it says 1/5 scripts enabled (as opposed to 1/4) and that shows up prior to logging in. I didn't have to enable anything else so it's a little strange. I'm thinking it's one of the other plugins.

Thanks for the help.