NoScript issue for Plex

[Smorgie49]

Greetings, My apologies in advance if this has already been asked and/or resolved...

Up until yesterday, Plex ran fine in Firefox with the 'Accept from app.plex.tv/web/app' added in the ABE on NoScript. However, now whenever I play something from it, I get a pop-up stating "Request (GET https;//192-168-1-105... along with about 5 lines of code ending in "filtered by ABE:<LOCAL> Deny. A button for Options pops up, which loads the ABE settings. Now, I have limited ability to translate this, but, more importantly, I do not know how to work around it. I assume that there is probably a simple solution, but it is currently beyond me.

I can play music still, but it sounds off, like there is some weird lag. If I disable NoScript, it plays fine. If I play from another browser, it plays fine, as well as other PCs both remotely and locally. This problem seems exclusive to NoScript, which I have become remarkably fond of.

I am current on Firefox, Plex (running locally on a Mac), and NoScript, and I am not aware of any big changes in any of them that would have suddenly caused this. I can include the entire popup message, if need be.

Any suggestions? Again, if this has been addressed already, just point me in the right direction. Thanks again!

[barbaz]

Can you please post the full message(s) from NoScript in the Browser Console (Ctrl-Shift-J)?

[Guest]

I think this is it. Please let me know if this is incomplete and/pr insufficient...

[NoScript XSS] Sanitized suspicious request. Original URL [https://192-168-1-105.30bc70e70a9a49a8a ... anguage=en] requested from [https://app.plex.tv/web/app#Plex%3A%7B% ... A%22%22%7D]. Sanitized URL: [https://192-168-1-105.30bc70e70a9a49a8a ... 7379884636].

[barbaz]

That message shows a XSS filter false positive. To work around it, go to NoScript Options > Advanced > XSS, add this exception

Code: Select all

^https://192-168-1-105\.30bc70e70a9a49a8a0c6f73628548a9d\.plex\.direct:32400/

(Assuming the port number is static. If it's dynamic, replace "32400" with "\d+".)

Now, I'm not sure how safe it is to open up your local Plex server to the world of XSS. So if the exception does fix the problem, go to NoScript Options > Advanced > ABE > USER, add

Code: Select all

Site 192-168-1-105.30bc70e70a9a49a8a0c6f73628548a9d.plex.direct
Accept from 192-168-1-105.30bc70e70a9a49a8a0c6f73628548a9d.plex.direct https://app.plex.tv/*

Let us know, thanks.

[Smorgie49]

Worked like a charm. This is very appreciated. Thanks tons for the help, you guys rock!

[barbaz]

You're welcome!