NoScript-2.9.5.2 crashes Flashplayer at two media sites:

[rasn]

When NoScript 2.9.0.14 was still the official release candidate, using Firefox-50.0, I was able to play programmes with no problems from the two Australian public broadcasters programme sites; ABC-iView, and SBS-OnDemand.

=> "ABC-iView": http://iview.abc.net.au/

=> "SBS-OnDemand": http://www.sbs.com.au/ondemand/

Both broadcasters require Adobe Flash to view their programmes.

After the NoScript official release candidate was upgraded to version 2.9.5.1, I followed suit and upgraded my Firefox-50.0 installation to NoScript version 2.9.5.1. After the NoScript upgrade, attempts to view programmes from ABC-iView, and SBS-OnDemand, resulted in Flash crashing and freezing up my system, with unprecedented memory allocation to the disk swap space. I could only break out of this by going to an already open shell (when my system would allow it after much delay) and killing the Firefox process, or waiting for some resources to free up after a complete and notified Flash crash if I could be bothered waiting (ABC-iView only).

Today, I updgraded to Firefox-50.0.1 and NoScript-2.9.5.2. The problem outlined above remains.

The two sites are configured in NoScript by me, to only be allowed on a temporary basis each time I visit. I use Private Browsing in Firefox, and only enable cookies if required, for a site to function.

My system is a GNU+Linux OS, I use the Adobe Flash Player as a plugin (currently version 11.2.202.644), configured in Firefox as "Ask to Activate".

SUMMARY:
=> Successful viewing in FF-50.0 + NS-2.9.0.14
=> Crashing/Freezing in FF-50.0 + NS-2.9.5.1
=> Crashing/Freezing in FF-50.0.1 + NS-2.9.5.2

[Giorgio Maone]

I cannot view any movie because they're restricted to Australia, but the Flash-based player starts (and displays the legal notice) on both sites without crashing.
Could you please try on a clean profile with just NoScript installed, and tell me also your Flash Player version?
Thank you!

[barbaz]

Thrawn, do you see this problem?

[rasn]

1. Apologise for the two sites geoblocking. I wasn't sure if they did such, now you've confirmed it.

2. I use the Adobe Flash Player as a plugin, currently version 11.2.202.644.

3. Unfortunately, the problem remains on a complete new FF profile.

4. NoScript has been, and currently is the only extension.

[rasn]

Just to clarify points 3 & 4 in my previous post (above): The problem persists with a new Firefox profile - with NoScript as the only extension. NoScript is the only extension that I've used and remains so at the time of writing this.

[rasn]

Last night at ABC-iView; I attemted to play an episode from the "Doc Martin" drama series, titled, "Doc Martin Series 7 Ep 5 Control-Alt-Delete" (yes, the episode title is actuallly, "Control-Alt-Delete").
That particular episode can be found in the ABC-iView "Category"; "Drama", or at:
http://iview.abc.net.au/programs/doc-ma ... 396A005S00
Flash, and my system froze as per usual, since upgrading from NoScript-2.9.0.14 to 2.9.5.1 and above (2.9.5.2). After waiting for a considerable time, some resources freed up enough for the display to officially report a Flash crash, and enable me to get a response to the keystrokes, "Ctrl+Shift+J". I've posted the console output in the next post from me:

[rasn]

"Ctrl+Shift+J" console output:

Code: Select all

Using //@ to indicate sourceMappingURL pragmas is deprecated. Use //# instead  jquery-v1.9.1.min.js:1

Use of getPreventDefault() is deprecated.  Use defaultPrevented instead.  jquery-v1.9.1.min.js:3:31293

Overriding failed (2147500037) redirect callback for 12: http://tviview.abc.net.au/crossdomain.xml -> http://tviview.abc.net.au/crossdomain.xml - 2

Overriding failed (2147500037) redirect callback for 12: http://cp44823.edgefcs.net/crossdomain.xml -> http://cp44823.edgefcs.net/crossdomain.xml - 2

Use of getPreventDefault() is deprecated.  Use defaultPrevented instead. jquery-v1.9.1.min.js:3:31293

Overriding failed (2147500037) redirect callback for 12: http://iviewum-vh.akamaihd.net/crossdomain.xml -> http://iviewum-vh.akamaihd.net/crossdomain.xml - 2

This site appears to use a scroll-linked positioning effect. This may not work well with asynchronous panning; see https://developer.mozilla.org/docs/Mozilla/Performance/ScrollLinkedEffects for further details and to join the discussion on related tools and features!  drama

[rasn]

Flash functions without crashing at:
=> NHK's English language site: http://www3.nhk.or.jp/nhkworld/
=> Deutsche Welle: www.dw.com/en/

[Thrawn]

Thrawn, do you see this problem?

I'm currently on a computer without Flash, actually.

[Golem]

@ Giorgio Maone

same problem here with other details:

Problem in Linux versions (Kubuntu 14.04 in a VmWare under Windows 7 control and Xubuntu 14.04 on a standalone computer)
Windows versions of Firefox 50.0.1 NOT affected
Linux Firefox 50.0 (50.0.1 NOT available yet on Linux)
NoScript 2.9.5.2 (also tried downgrade to 2.9.5.1)
Adobe Flash Player as a plugin, currently version 11.2.202.644. (no update available)
Visit (one example) Twitch.tv and get normal dark grey blank page with only Twitch logo (same bug on all sites with Flash video)
NoScript set to Block all until I choose Temporarily unblock
Click ONCE on Temporarily Unblock
Page starts loading images and video player Frame
Firefox issues small grey banner warning "libavcodec may be vulnerable..... " (no fix for this yet)
CPU usage stays normal 5 to 9 %
Disk usage goes to 100% then Firefox and Linux totally unresponsive.
Cannot do anything else.
Only option is to Click Firefox Top right Close button without stopping until I get 1 of 3 messages
1- Grey Box: Script unresponsive on page (from NoScript): Close or Wait.
2- Grey Box: Firefox is not responding (from Linux): Close or Wait.
3- Yellow popup banner: Something on page is slowing your browser (from Firefox): Close or Wait.

Tried :
Resetting NoScript (no fix)
Removing NoScript and reinstalling (no fix)
Removing NoScript and downgrading to 2.9.5.1 (no fix)
Resetting Firefox , adding ONLY Noscript back (no fix)

Does this help at all?

For now, I have to remove NoScript but would prefer a fix/solution instead.

[Golem]

could not find an EDIT option for my previous post (maybe because I do not have an account??)

forgot to mention

Installed NoScript version 2.9.0.14 with Update set to OFF.

System works perfectly.

[Thrawn]

maybe because I do not have an account

Indeed. Let us know if you do register one.

[rasn]

So, any thoughts on my issue folks?

Just to refresh your minds re my original post, the issue started after upgrading from NS-2.9.0.14 to the NS-2.9.5.1 & NS-2.9.5.2. NoScript has been the only extension that I've been using to this point in time. New Firefox profiles did not resolve the issue. Disabling NoScript completely will allow me to play the Flash based shows at ABC-iView & SBS-OnDemand.....but this is way less than ideal.

It is rather a shame, but I am now very seriously considering dropping NoScript in favour of uMatrix. I would rather run NoScript, it has been for me; a good "one stop shop" until now.

Welcome some feedback on this matter.

[barbaz]

I am now very seriously considering dropping NoScript in favour of uMatrix.

I suggest you read this first - viewtopic.php?p=83579#p83579

I would rather run NoScript, it has been for me; a good "one stop shop" until now.

Can you downgrade to NoScript 2.9.0.14 while waiting for this to get dealt with?

Old NoScript @
https://addons.mozilla.org/addon/noscript/versions
*or*
https://noscript.net/feed?c=100&t=a

[rasn]

Hi barbaz. Thanks for the heads up on the rollback suggestion. Perhaps I may only rollback to 2.9.0.14 each time I need to view programmes at ABC-iView & SBS-OnDemand. Otherwise, I think I'll continue to browse with 2.9.5.2 unless I encounter new road blocks.

I don't know if it helps, but earlier on, I posted a browser console output that I was "lucky" enough to capture when I last attempted to view a programme at ABC-iView (see posts 6 & 7) above. SBS-OnDemand attempts just completely froze Firefox and most of my desktop environment, attempts to access the browser console were always fruitless, only way out seemed to be to kill the Firefox process.