chart errors on hl.co.uk

[djh]

When I try to look at some charts on www.hl.co.uk I don't see them. I see placeholders and rotating icons instead. It's just occured to me that this may actually be a NoScript problem, since it seems somewhat similar to a problem that was recently fixed with BBC video failing to play because third-party hosts weren't being reported by NoScript to the user as blocked.

In this case I look at a page such as https://online.hl.co.uk/my-accounts/sec ... ol/B65TLW2 (I don't suppose you can access it unless you happen to have an account with H-L but who knows ...) and Firebug shows me two Aborted requests for charts from https://chart.hl.co.uk/ But if I ping that host I get a response from www.hlfunds.mdgms.com and if I then substitute that domain instead of the hl one in the full request, like this:

http://www.hlfunds.mdgms.com/charts/cha ... ALE_DATA=1

Then I get to see the chart! So it seems that something is preventing the request from working when there's a redirect or whatever it is involved. I have every domain listed by NoScript temporarily enabled and it isn't listing mdgms.com or any subdomain. Is this a NoScript problem (5.0.2) or a Firefox problem (51.0.1 and yes I know) or an HL problem?

[barbaz]

Any difference with NoScript latest development build?

[djh]

I don't know. Is there any reason to expect that there would be? The problem has been there for quite a while, so it's not something that has recently been introduced. I've no idea how to install the latest dev build, or perhaps more importantly how to restore the current version if there's any problem, so I'm reluctant to experiment to no purpose.

[barbaz]

Problem is, I'm getting 403 Forbidden on some of your links and a required login on others.

Do you have a link where we can view a chart / see the problem without login?

[djh]

I only posted one link - a very long one to the chart. You should be able to see that. The forum software has converted other text into links - nothing to do with me!

Here's the link that fails:
http://chart.hl.co.uk/charts/chart.jspr ... ALE_DATA=1

If you type that into the browser, then NoScript reports that mdgms.com (not a link) is not enabled, but it doesn't do that if the link was embedded in another page from hl.co.uk (not a link). That's why I think it may be another NoScript bug like the one that broke BBC videos.

[djh]

Oops, sorry, I did post more than one link, but I hope you understood.

[barbaz]

Here's the link that fails:
[...]
If you type that into the browser, then NoScript reports that mdgms.com (not a link) is not enabled,

Odd, that link just gives me a PNG image. No active content is or should be involved there.

I wonder if the site serves different things to different people depending on geolocation.

[djh]

That's odd; I get a connection reset, eventually. What does the PNG look like? Does it look like the first chart I linked from the mdgms.com domain? And if so, where is it actually being served from?

[barbaz]

Actually that link also serves me a PNG. Downloaded both PNGs and did a diff. They are identical.

Not really surprising, given that both sites are one and the same -

Code: Select all

$ dig chart.hl.co.uk

; <<>> DiG 9.10.3-P4-Ubuntu <<>> chart.hl.co.uk
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 8081
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;chart.hl.co.uk.                        IN      A

;; ANSWER SECTION:
chart.hl.co.uk.         235     IN      CNAME   www.hlfunds.mdgms.com.
www.hlfunds.mdgms.com.  10675   IN      A       217.11.198.129

;; Query time: 8 msec
;; SERVER: 127.0.1.1#53(127.0.1.1)
;; WHEN: XXXXXXXXXXXXXXXXXXXXXXXXXXXX
;; MSG SIZE  rcvd: 83

[djh]

Hmm, I can get the image from chart.hl.co.uk using wget but not in Firefox, or rather not in this Firefox session. If I open a new instance of Firefox, I can get it there. Any ideas on how to diagnose what the problem is, so I can stop it recurring? I'd like to find a full resolution rather than just clear my cache and hope for the best or whatever.

[barbaz]

As a test, does disabling NoScript (Tools > Add-ons Manager > NoScript > Disable > Yes, remove ALL protections) get it working consistently?