[RESOLVED] Yahoo StatTracker

[Guest]

Yahoo StatTracker only loads 50% before stopping. I followed the steps to troubleshoot Firefox extensions and NoScript is causing the problem. I have yahoo.com and yimg.com whitelisted. How can I get StatTracker to load without disabling NoScript?

[barbaz]

When this issue occurs, do you see anything related in the Browser Console? (Ctrl-Shift-J)
(if you don't know what's related, turn off CSS warnings and post everything else you see)

[Guest]

I am unfamiliar with Browser Console so forgive me if I didn't properly turn off CSS warnings. Browser Console wouldn't open on StatTracker so I opened it on my Yahoo league page before opening StatTracker. Here's what I copy and pasted https://shrib.com/KNBzr6Anyo4DxQV?v=nc. Thank you for your help.

[barbaz]

Looks like you did turn off CSS warnings.

Code: Select all

[NoScript HTTPS] Redirected Channel https://sports.yahoo.com/nba/gamechannel?app=st&type=nba&matchid=
GET
https://sports.yahoo.com/nba/gamechannel [HTTP/2.0 301 Moved Permanently 48ms]
[NoScript HTTPS] Redirected Channel https://sports.yahoo.com/nba/gamechannel/?app=st&type=nba&matchid=
[...]
b.scorecardresearch.com:443 uses an invalid security certificate.

The certificate is only valid for the following names:
a248.e.akamai.net, *.akamaized.net, *.akamaihd-staging.net, *.akamaihd.net, *.akamaized-staging.net

Error code: <a id="errorCode" title="SSL_ERROR_BAD_CERT_DOMAIN">SSL_ERROR_BAD_CERT_DOMAIN</a>
(unknown)

NoScript Options > Advanced > HTTPS, add to "Never force secure (HTTPS) connections..." -

Code: Select all

.yahoo.com
b.scorecardresearch.com

Code: Select all

[NoScript XSS]: sanitized window.name, "darla_csc_writer_0--%253Cscript%2520language%253Djavascript%253E%2520if%2528window.xzq_d%253D%253Dnull%2529window.xzq_d%253Dnew%2520Object%2528%2529%253Bwindow.xzq_d%255B%2527TOC7LEwNHls-%2527%255D%253D%2527%2528as%2524125g6bs2m%252Caid%2524TOC7LEwNHls-%252Ccr%2524-1%252Cct%252425%252Cat%2524H%252Ceob%2524fac2_r%253D1%253Afed_status%253D17%253Agd1_match_id%253D-1%253Apt%253D8%253Arbkid%253D2315954551%253Aud_risk%253D0.00%253Awin_s%253D4%253Aypos%253DLDRB%2529%2527%253B%253C/script%253E%253Cscript%2520language%253Djavascript%253E%250A%2528function%2528%2529%257Bwindow.xzq_p%253Dfunction%2528R%2529%257BM%253DR%257D%253Bwindow.xzq_svr%253Dfunction%2528R%2529%257BJ%253DR%257D%253Bfunction%2520F%2528S%2529%257Bvar%2520T%253Ddocument%253Bif%2528T.xzq_i%253D%253Dnull%2529%257BT.xzq_i%253Dnew%2520Array%2528%2529%253BT.xzq_i.c%253D0%257Dvar%2520R%253DT.xzq_i%253BR%255B++R.c%255D%253Dnew%2520Image%2528%2529%253BR%255BR.c%255D.src%253DS%257Dwindow.xzq_sr%25
https://s.yimg.com/rq/darla/2-9-20/html/r-csc.html
https://s.yimg.com/rq/darla/2-9-20/html/r-csc.html
darla csc writer, potential invalid html content r-csc.html:21:411
darla csc writer, invalid context r-csc.html:21:411

Gak. NoScript is filtering an XSS attempt on the site. Thank NoScript for saving you, and run away fast.

[Guest]

Thank you so much for your time and help. I had to replace b.scorecardresearch.com with .yimg.com but StatTracker is loading 100% now.

[barbaz]

You're welcome!