NoScripters and WebSec nerds of all lands, unite!
https://forums.informaction.com/
Could you please describe in details your problem?sigmax2 wrote: On Tuesday 21st Feb, I noticed that the problem had returned and upgraded again to NoScript 2.3.1.rc4 Unfortunately, the problem is still there.
1) Are you using google.com or a local domain (e.g. google.co.uk)?Mc wrote:All search links end here now in a "302 Moved" message.
1. Both.Giorgio Maone wrote:1) Are you using google.com or a local domain (e.g. google.co.uk)?Mc wrote:All search links end here now in a "302 Moved" message.
2) Are google.com and gstatic.com allowed or forbidden?
3) Could you share a search URL and one of these results URL leading to "302 Moved"?
4) Does it happe on a clean profile with just NoScript installed?
Code: Select all
http://www.google.co.uk/url?q=http://...Code: Select all
for each(let et in ['focus','mouseover','mousedown','click'])addEventListener(et,function(e){var a=e.target;if(a.href&&!a._href){a._href=a.href=a.href.replace(/.*\/url.*[\?|&]url=(http[^&]+).*/,function(a,b)decodeURIComponent(b));if(/\brwt\(/.test(a.getAttribute('onmousedown')))a.removeAttribute('onmousedown')}},true)Code: Select all
for each(let et in ['focus','mouseover','mousedown','click'])addEventListener(et,function(e){var a=e.target;if(a.href&&!a._href){a._href=a.href=a.href.replace(/.*\/url.*[\?|&](?:url|q)=(http[^&]+).*/,function(a,b)decodeURIComponent(b));if(/\brwt\(/.test(a.getAttribute('onmousedown')))a.removeAttribute('onmousedown')}},true)I see similar to Mc,Mc wrote:1. Both.Giorgio Maone wrote:1) Are you using google.com or a local domain (e.g. google.co.uk)?Mc wrote:All search links end here now in a "302 Moved" message.
2) Are google.com and gstatic.com allowed or forbidden?
3) Could you share a search URL and one of these results URL leading to "302 Moved"?
4) Does it happe on a clean profile with just NoScript
installed?
2. google is not allowed, gstatic is blocked by RequestPolicy.
Seems RequestPolicy blocks all search results, because google makes request to the results now (again?).
The resulting redirect site looks different from the further one, though.
So your bypass doesn't work any longer here, and I wouldn't even know, if RequestPolicy would not block
the redirect.
3. You can take any, with my settings.
4. I can try it, if it's still needed
I have seen this on Fx 3.6.27, Aurora (12.0a2) and 10.0.2 (on several profiles, on two PCs, all with NoScript 2.3.1rc4).Mc wrote:All search links end here now in a "302 Moved" message.
Code: Select all
"Windows 7" mouse hard to seeCode: Select all
http://www.microsoft.com/athome/setup/magnify.aspxI'm no expert, but I think the Referer (as shown by RefControl 0.8.16), will now have the 'trailing suffix' [presumably identifying your search, and possibly disclosing more] when you 'get to your destination'.Temporarily allow requests from google.co.uk to microsoft.com
Code: Select all
Origin
http://www.google.co.uk/search?q=%22Windows+7%22+mouse+hard+to+see&btnG=Search&hl=en&safe=off&site=&btnK=
Destination
http://www.google.co.uk/url?q=http://www.microsoft.com/athome/setup/magnify.aspx&sa=U&ei=n1BFT4eRFs6p8QO045nlBA&ved=0CBIQFjAA&usg=AFQjCNFc3zFjoCbbrLB99qpt12o7G7_kHQ
Origin
http://www.google.co.uk/search?q=%22Windows+7%22+mouse+hard+to+see&btnG=Search&hl=en&safe=off&site=&btnK=
Destination
http://www.google.co.uk/url?q=http://www.microsoft.com/athome/setup/magnify.aspx&sa=U&ei=n1BFT4eRFs6p8QO045nlBA&ved=0CBIQFjAA&usg=AFQjCNFc3zFjoCbbrLB99qpt12o7G7_kHQ
Origin
http://www.google.co.uk/url?q=http://www.microsoft.com/athome/setup/magnify.aspx&sa=U&ei=n1BFT4eRFs6p8QO045nlBA&ved=0CBIQFjAA&usg=AFQjCNFc3zFjoCbbrLB99qpt12o7G7_kHQ
Destination
http://www.microsoft.com/athome/setup/magnify.aspx
Better, but not entirely.Giorgio Maone wrote:Please check latest development build 2.3.2rc1, thanks.
This is already functionally OK, but I've tried to make the behavior more uniform in latest development build 2.3.2rc2.Bachstelze wrote: All result titles are direct links to youtube, but the result images are links to the google tracking page, as seen in the infobox at the bottom of ff. But if you click them the revert instandly to plain youtube links and there is no request to the google tracking page in the noscript net panel.
[/quote]Bachstelze wrote: The image search does not work for me. Google and gstatic are allowed but the redirect is endless there.
Nearly. The result has to be hovered one time to change the link text in the ff bottom box.Giorgio Maone wrote:This is already functionally OK, but I've tried to make the behavior more uniform in latest development build 2.3.2rc2.Bachstelze wrote: All result titles are direct links to youtube, but the result images are links to the google tracking page, as seen in the infobox at the bottom of ff. But if you click them the revert instantly to plain youtube links and there is no request to the google tracking page in the noscript net panel.
Bachstelze wrote: The image search does not work for me. Google and gstatic are allowed but the redirect is endless there.
I found it, i set in the force https field *.google.com which actually breaks the image results. The https link is redirect from google to http, and from noscript back to https which causes an endless loop.This sounds like a different issue. Could you provide more details? Does disabling NoScript actually help?