Bottom bar doesn't disappear after untrusting

[andrenalus]

Hi
Thanks for this awesome add-on.

I have a problem that just appeared now.
Sometimes, the sites I visit regulary decide to "implement" (not using the correct verb here) a script or something from another website.
What I usually do here is, check that new "implemented" website and decide whether or not the site is ok/needed for the original site to work.
Now, after allowing or untrusting the site, the bottom yellow bar from noscript disappears.
BUT, with rlslog.net, untrusting the new site geniusdisplay.com did not made the bottom yellow noscript bar disappear.
Here's a screenshot,
http://i.imgur.com/2xHTaH2.png
there's no more sites to allow or untrust and the bar should vanish, yet it still holds on. After I click on X and I go to another web page from rlslog.net, the bar appears again.

[barbaz]

What does the menu on the NoScript icon show? Is it any different?

(For testing, please set NoScript Options > Appearance > Full Domains checked if it's not already)

[andrenalus]

What does the menu on the NoScript icon show? Is it any different?

(For testing, please set NoScript Options > Appearance > Full Domains checked if it's not already)

Thanks for your reply.
You mean the icon top somewhat right corner?
http://i.imgur.com/JwKxu7v.png
It shows the same.
Except, in the meantime they seem to have "implemented" another site.
I checked that option in the appearance (it wasnt checked).
Did you try to reproduce the problem?

[barbaz]

Yes, I see it as well... definitely something specific to that site but not sure what's causing it...
EDIT Hang on, I'm seeing some oddities comparing my screen with your screenshots:
1) you have facebook in your menu, and it does not show up at all in mine
2) the total script count isn't quite right

Also if I Temporarily allow z5x.net (or s-tag.z5x.net, followed by manual reload), the notification bar goes away as expected. It's something related to how that site's script(s) are included...


EDIT2 There are two script tags from z5x included:

Code: Select all

<script src="http://s-tag.z5x.net:8001/b/{random looking hex chars removed}?referrer=[REFERRER_URL]" type="text/javascript"></script>



<script src="http://s-tag.z5x.net:8001/b/{random looking hex chars removed}?referrer=[REFERRER_URL]" type="text/javascript"></script>

It's probably something to do with that explicit port, which IIRC should be showing on the menu as a Full Address regardless of selected options.

Will do some more investigation and post back

[barbaz]

Yep that's it - scripts with explicit port are not treated as Untrusted by the notification. The same occurs if I put up a "3rd-party" script on my local server and serve it off port 8001 same like the site.

Moving to NoScript Development. Thanks for the bug report

[andrenalus]

Thanks for the bug report

Thanks for your involvement.
Hope to see this fixed soon.