InformAction Forums

Hey all,

I am the webmaster for http://www.anvilsmithtech.com a small website for computer techs, I mention that since obviously security is important. I do not use any client side scripting, but I do use quite a bit of server-side scripting. As far as I knew the server-side scripting would not affect or be affected by no-script. Yet when I visit my site with no-script on it says that it has blocked a script.

Scripts Currently Forbidden | <SCRIPT>: 1 | <OBJECT>: 0

Is there anyway to find out what the script that is being blocked is so that I can revise the code accordingly? There doesn't seem to be any loss of functionality on the site, but it is the principle that I pride myself on having a client side scripting free website. Any help would be appreciated. Thanks

Just checked and I can indeed find no scripts.

Is your domain on your whitelist?

That seems a bug, I'm investigating it.
Thanks for your report.

anvilsmithtech wrote:Hey all,

I am the webmaster for http://www.anvilsmithtech.com a small website for computer techs, I mention that since obviously security is important. I do not use any client side scripting, but I do use quite a bit of server-side scripting. As far as I knew the server-side scripting would not affect or be affected by no-script. Yet when I visit my site with no-script on it says that it has blocked a script.

Scripts Currently Forbidden | <SCRIPT>: 1 | <OBJECT>: 0

Is there anyway to find out what the script that is being blocked is so that I can revise the code accordingly? There doesn't seem to be any loss of functionality on the site, but it is the principle that I pride myself on having a client side scripting free website. Any help would be appreciated. Thanks

I just went there. NS logo mouseover now reads Scripts Currently Forbidden | <SCRIPT>: 0 | <OBJECT>: 0 ; however, menu shows a request: "Allow anvilsmithtech.com". Which, uh, sort of sounds like there's a client-side script trying to run. Allowing or temp-allowing turns the NS logo from red to blue and shows "Scripts Currently Allowed: 0 - 0" and offers to revoke or forbid. I don't know whether the bug is on your side or NS, but that's the status as of this moment, Hope it helps you and Giorgio figure it out.

Thanks for checking it out guys. It now says that it has blocked 0 scripts, I can accept that just fine. Thanks to the author for a great plugin, and for checking it out for me.

@mmcspadden:
Yes, I fixed that but with all this mess I forgot to mention your report in the changelog.
Done

I just went to your site and the status says Scripts: 0 - Objects: 0, so I am not sure. Do you have anything like ghostery or some other extension that injects gui Js on your machine? Because your site is coming up clean with me.

@GµårÐïåñ:
it was a bug that I fixed in 1.9.2.5, see my post above.

Gotcha, that's why I didn't see it, because I was using your latest build, duh.