InformAction Forums

OK, let's put that last one to bed. When I disabled NoScript to test, it clearly went to a state of allow all, hence the exclamation mark and hence why I had never seen it before.

Just to re-iterate, all of OneDrive is allowed through NoScript and it's the only site playing up with NoScript running

Hmm, since it occurs even with Scripts Globally Allowed.. feature whac-a-mole time?
As a test, please disable these features of NoScript, in order, one at a time, re-enabling each after testing, until the issue stops occurring:
1) XSS: NoScript Options > Advanced > XSS, un-check everything
2) ABE: NoScript Options > Advanced > ABE > un-check "Enable ABE"
-> 2a) if that works, try re-enabling ABE and setting about:config > noscript.doNotTrack.enabled to false
3) ClearClick: NoScript Options > Advanced > ClearClick, un-check everything
4) Inclusion type checking: about:config > set noscript.inclusionTypeChecking to false
5) The other XSS filter: about:config > set noscript.xss.checkInclusions to false
6) surrogates: about:config > noscript.surrogate.enabled to false

Right-o

I tried them all, one at a time and then restored each previous condition before continuing to the next one.

All looked fruitless until option 6, which has worked!

What I have noticed, is that OneDrive constantly loads background 'stuff' for some seconds after the page has rendered. It's a little like Amazon, that takes a while before all background elements are loaded before you can proceed with some account related stuff.
The difference with OneDrive is that it seems to conflict with NoScript, hence the page reloads. Does that make any sense?

So, do I leave the about:config > noscript.surrogate.enabled as false? Will that affect any other functionality?

Well, if you choose to leave that pref set to false, in general you'll notice needing to allow more domains to get sites to work. For more information see this sticky: viewtopic.php?f=26&t=19930

Do you have any non-default surrogates?
Can you please post the full list of scripts on OneDrive? (set minimal permissions that get it working with surrogate.enabled set to false; then to copy the full list of sites, right-click on the NoScript menu somewhere not on a site, e.g. the "About NoScript" entry.)


(It's really odd that disabling surrogates would make it work when allowing all scripts doesn't. )

Hang on, I should have asked before, are you using latest NoScript? (2.9.0.10 or 2.9.0.10rc1)

I have no idea about surrogates - I only just discovered their existence!

And sorry but I didn't follow those instructions about listing which sites OneDrive uses. How do I get the list without physically writing it down?

Guest wrote:And sorry but I didn't follow those instructions about listing which sites OneDrive uses. How do I get the list without physically writing it down?

Step 1 is to set noscript.surrogate.enabled to false (which you already did).
Step 2 is to get the OneDrive site working as it should with as few script sources Allowed as possible. (You probably use OneDrive enough that you've already done this step too.)
Step 3 is to open the NoScript menu and right-click, say, the "About NoScript <version>..." menu item or "Options..." menu item.
Step 4 is to paste like with Ctrl-V

That's where I lose you. What or where is the NoScript menu?

Got there - the menu is when you right-click the NoScript icon whilst on any page...
Right clicking didn't seem to do anything but here we are

+youtube.com
+bing.com
+skypeassets.com
+akamaihd.net
+office.net
+ytimg.com
+outlook.com
+microsofttranslator.com
+microsoft.com
+skype.com
+optimizely.com
+trouter.io
+about:neterror
+live.com

That's weird, I'm not seeing in my about:config, any surrogates that would apply for any of those? Plus that list shows all script sources are Allowed, nothing Forbidden or Untrusted...

Assuming you are indeed using NoScript 2.9.0.10 or 2.9.0.10rc1, there's only one default surrogate that would execute on that page.. so here's a long shot:
about:config
right-click > new > string
name: value: If it does not work please right-click that preference and select Reset.

Also (and this is another long shot) does about:config > noscript.jsHack have a user set value? (It shouldn't here. If it does, its content might be better off converted to a surrogate script.)

Well I added it but I'm not sure what to test or what it proves. It was working anyway after changing the about:config > noscript.surrogate.enabled to false. Or do I change that setting back to "true" as well?

I am using NoScript 2.9.0.10

NoScript.jsHack has NO value set

Guest wrote:Well I added it but I'm not sure what to test or what it proves. It was working anyway after changing the about:config > noscript.surrogate.enabled to false. Or do I change that setting back to "true" as well?

Yes change it back to true, otherwise the added pref won't have any effect.

It disables that surrogate from executing on any page on live.com (including all subdomains)

Guest wrote:NoScript.jsHack has NO value set

Good

OK changed back to true and running with the new element.

OneDrive is back to constantly reloading

Well this is a really odd one. I don't use OneDrive myself, so can't test directly. I'll ask around and see if anyone else is experiencing likewise, let me get back to you.