Noscript 1.9.7 breaks evernote web clipper applet?

[frustrated]

Using Noscript 1.9.7 and can not get Evernote's web clipper toolbar applet to work. Using FFox 3.5.1 and XP Pro SP3. All I see is a small window saying:

Loading Clipper

Close Window


Disabling Noscript fixes the problem.

[Giorgio Maone]

Could you check if latest development build 1.9.7.1 does work?
If not, could you check if any message related to NoScript appears in Tools|Error Console when this happens?

[frustrated]

Same thing with development build. If Noscript shows a XSS icon then I have to do an UNsafe Reload each time I want to use the Evernote web clipper. No Errors in the console. Some sites there is no XSS warning at all and that is where I see the afore mentioned simple screen.

[therube]

Link: Evernote - Remember everything

[frustrated]

Link: Evernote - Remember everything

I know what Evernote does I have been using it for over a year. Whats that link for? POst some verbage why you are posting the link and what on that page in particular will fix the problem with Noscript?

[therube]

I know what Evernote does

Well I didn't.
So when I looked to see what it was, I posted a link so others would not have to search for it.

[Giorgio Maone]

BTW, evernote is working fine for me (latest development build 1.9.7.1), as soon as I allow "evernote.com".

[frustrated]

When you say Evernote works are you using Ffox 3.5.1 and talking about using http://www.evernote.com or their web browser toolbar javascript applet? The latter is what I am having problems with. I have no problems going to http://www.evernote.com.

Disabling all my addons except noscript and Java Quickstart does not make any difference.

The only way I can get the toolbar applet in FireFox 3.5.1 to work is to disable noscript. What entries do you have in Noscripts Anti-XSS Protection Exceptions?


This is the javascript applet I am using from Evernote:

Code: Select all

javascript:(function(){EN_CLIP_HOST='http://www.evernote.com';try{var%20x=document.createElement('SCRIPT');x.type='text/javascript';x.src=EN_CLIP_HOST+'/public/bookmarkClipper.js?'+(new%20Date().getTime()/100000);document.getElementsByTagName('head')[0].appendChild(x);}catch(e){location.href=EN_CLIP_HOST+'/clip.action?url='+encodeURIComponent(location.href)+'&title='+encodeURIComponent(document.title);}})();

[Giorgio Maone]

When you say Evernote works are you using Ffox 3.5.1 and talking about using http://www.evernote.com or their web browser toolbar javascript applet?

No, I was talking about the Evernote Web Clipper add-on for Firefox, which is allowed to work out of the box by NoScript with custom code.

In order to make prevent the JavaScript bookmarklet from triggering XSS warnings, instead, you would need to add the following exception in NoScript Options|Advanced|XSS:

Code: Select all

http://www\.evernote\.com/clip\.action\?url=

Notice, though, that for the bookmarklet to work you'd always need to have the page you want to clip allowed, so it's quite inconvenient/unsafe.
The best option you've got is using the aforementioned add-on, instead.

[slownick]

Hey there,

I am trying to use the evernote web clipper bookmarklet with NoScript 1.9.7.9, but I always got a blank clipping window, just containg those two items "Loading clip" (status item) and
"Close Clipper" (<- as a link). I already added these to lines to the XSS exceptions:

• ^https?://www\.evernote\.com/clip\.action$
  ^http://www\.evernote\.com/clip\.action\?url=

But unfortunately they do not work, so what can I do?

[Giorgio Maone]

Is the page where you're using the bookmarklet whitelisted?

[slownick]

Yes the scripts are allowed on this page.

[slownick]

so no clue?

[slownick]

Ah got it to work!

I somehow hat a "?" in the https address, which should not be there. Just noticed it, removed it and now with the correct line in the whitelist, it works.