[UNRELATED] Java applet from other domain

[bogeskov]

I'm trying to get my bank service to work with NoScript, but my experience with NoScript leaves me grinding to a halt when I try.

The issue it this site:
https://www.netbank.nordea.dk/netbank/index.jsp
I've Allow'd nordea.dk but this applet doesn't get shown:
<APPLET name="DANID_DIGITAL_SIGNATUR" tabindex="1" archive="https://applet.danid.dk/bootapplet/1352055329642" code="dk.pbs.applet.bootstrap.BootApplet" WIDTH="500" HEIGHT="450" mayscript="true">
...
<PARAM name="ServerUrlPrefix" value="https://applet.danid.dk" />
<PARAM name="ZIP_BASE_URL" value="https://applet.danid.dk" />
<PARAM name="ZIP_FILE_ALIAS" value="Logon2" />
...
</APPLET>
And according to FireBug I get this error:
"NetworkError: 404 Not Found - https://www.netbank.nordea.dk/netbank/d ... BootApplet"
What have I messed up, since the hostname has been rewritten?

If I don't allow nordea.dk the applet loads as expected (via placeholder), however since scripts are blocked the login process fails.

Very confused - Yours
Morten Bogeskov

[Tom T.]

<snip>
"NetworkError: 404 Not Found - https://www.netbank.nordea.dk/netbank/d ... BootApplet"
What have I messed up, since the hostname has been rewritten?

If by "messed up" you are referring to the URL of the error message, please know that there is a known forum software issue that truncates long URLs.
It may be diagnostically helpful if you were to re-post the error message, but this time, wrap the url in URL tags or Code tags. This is the workaround for that bug.

Also, after reproducing this situation, could you please open Firefox Error Console (Ctrl+Shift+J), click "Errors", and copy any red Error messages and paste them here? Also please click "Messages", and post here any messages relating to NoScript. Thanks.


ETA: When this happens, open the NS menu and look in "Recently blocked sites". I see an entry, "Allow (or "Temporarily allow) all from

Code: Select all

https://www.netbank.nordea.dk

Try at least temporarily allowing that, and be sure to look for other entries in Recently Blocked Sites. This happens when you have plugins blocked, including at trusted sites. The first "allow" is only for the site's script. Plugin loads often require this additional permission.

[Giorgio Maone]

It works for me on a clean profile with just NoScript installed.
However, rather than requiring two steps to be allowed (one for the current site, the other for the archive site) it asks just one.
This is fixed in latest development build 2.6.1rc1, please check it on a clean profile and if it works (like it does for me) please try Standard Diagnostic on your usual one.

[bogeskov]

It's apparently a collision between very old settings for firefox and NoScript.
I've created a new profile from scratch (only copying the places database), and compared about:config filtered with "noscript" from the 2 profiles and they're identical, however in the new profile everything works as expected.

Please disregard this thread as static noise from a bad installation, and I apologize for wasting your time.
/Bogeskov

[Tom T.]

Thanks for letting us know, and no apology required.
You needed to do the diagnostics as recommended -- not a problem.