Page 1 of 1
ClickJacking blacklist?
Posted: Thu May 14, 2009 3:21 am
by SonicComKid
I was on a website which had the clickjacking box pop up, and because by default it always as that 'block element' checked, I accently clicked OK before unchecking it and now every time I try to type in the search field of the website NoScript hides the search bar and buttons on me!
How to I remove the clickjacking block? I can't find settings anywhere to undo the block and it's getting on my nerves!
Re: ClickJacking blacklist?
Posted: Thu May 14, 2009 5:07 am
by GµårÐïåñ
Check your setting under NoScript Options|Plugins Tab|ClearClick items and you can also check the setting under |Notifications tab|ClearClick warning other than that I can't see why you would not see the alert again so you can do something about it. Now if that's not it and you feel brave enough, use about:config and look for noscript.clearClick.exceptions and/or noscript.clearClick.subexceptions; to see if anything got put in there. If so then just open it up and remove the offending entry (as always be careful when messing with about:config). Hopefully I understood your problem right, if not then I apologize and maybe you can clarify it a bit more.
Re: ClickJacking blacklist?
Posted: Thu May 14, 2009 5:28 am
by SonicComKid
I went through the settings you suggested trying both with 'untrusted' and 'trusted' checked for ClearClick protection on pages... under the plugins tab, also I have under Notifications tab I have ClearClick Warning checked.
I went though the about:config and cleared the values that were in the noscript.clearclick.exceptions and noscript.clearclick.subexceptions then even closed and restarted firefox to ensure the settings applied, and then yet again, very moment I click the search button the field and buttons vanish again thanks to ClearClick/ClickHijack thing.
I don't get it.. there has to be some way to get this thing to stop trying to block that field. The feature keeps getting on my nerves as it prompts me every time I try to use pages where objects are even slightly over-lapping which seems common on many websites with their submit/search buttons.
Re: ClickJacking blacklist?
Posted: Thu May 14, 2009 5:38 am
by SonicComKid
Okay.. I'm getting really confused here. I visited the website in IE just to test and the search works as normal. I disabled NoScript in firefox, restarted it, went to the website and the moment I tried to click search, again the box vanishes. Any idea what's going on? is ClearClick taking effect while NoScript is disabled or is there something else going on? I never had issues searching on that site before until this misshap with accidentally enabling clearclick on that search button.
Re: ClickJacking blacklist?
Posted: Thu May 14, 2009 5:48 am
by GµårÐïåñ
Actually, if you trusted the site and DID NOT want NoScript to block it, then you would actually ADD the site as an exception in the fields I gave you; but it seems your problem is something else at the moment. To answer your question though, NO, once NoScript is disabled, it doesn't continue to affect anything. I suspect you might have another extension conflicting or your profile may be corrupted somehow or the site is just being silly. Is it possible for you to provide me a link so I can check it out and see what's going on? If its private or you prefer not to, can you try the
Standard Diagnostics? You can also provide me the link in PM if you don't want to post it here.
Re: ClickJacking blacklist?
Posted: Thu May 14, 2009 9:49 am
by Giorgio Maone
@
SonicComKid:
ClearClick doesn't hide anything, it just prevents you from clicking or typing in hidden or disguised elements.
If something actually disappears, there's probably something else (outside NoScript) at work, e.g. AdBlock Plus, and
Standard Diagnostic is your friend -- just like GµårÐïåñ suggested.
Re: ClickJacking blacklist?
Posted: Thu May 14, 2009 8:38 pm
by therube
URL of this website?
Re: ClickJacking blacklist?
Posted: Thu May 14, 2009 10:05 pm
by SonicComKid
Thank you all for the suggestions, I started firefox and safemode and noticed two big differences, 1. search button was smaller and properly fits the frame 2. the search button works again. I did the diagnostic of trying each add-on one by one disabled until the website worked like it should. It seems the one that was causing the issues was Adblock Plus oddly enough, despite the element that kept getting hidden was a mundane normal <form> entry which adblock plus to my knowledge isn't supposed to be made to block..
I'll do a little digging to figure out why adblock plus on it's own is both making the feild vanish when I try to click the search button and why it also oversizes the buttons for no apparent reason.
Thank you all very much for the help and suggestions you offered. Seems NoScript wasn't at fault after all, just seemed like it due to coincidence the same time I slipped up with the element block prompt from no script was also the time Adblock plus decided to act up.
Can someone though explain to me what happens if I leave the box checked when it asks 'keep this element locked' when the click hijack thing pops up?
Re: ClickJacking blacklist?
Posted: Thu May 14, 2009 10:18 pm
by Giorgio Maone
SonicComKid wrote:Can someone though explain to me what happens if I leave the box checked when it asks 'keep this element locked' when the click hijack thing pops up?
If you leave the box checked, ClearClick will keep preventing you from interacting with the locked element.
Otherwise, you will be allowed to click/type there until you exit the browser.
Re: ClickJacking blacklist?
Posted: Thu May 14, 2009 11:01 pm
by GµårÐïåñ
When on that page, right-click abp's statusbar icon and click on blockable elements and see what's being blocked, then you can add an exception to it if its a false positive that's gone rogue and additionally you can report it to them so they can fix it. Glad you figured it out.
Re: ClickJacking blacklist?
Posted: Fri May 15, 2009 12:05 am
by SonicComKid
GµårÐïåñ wrote:When on that page, right-click abp's statusbar icon and click on blockable elements and see what's being blocked, then you can add an exception to it if its a false positive that's gone rogue and additionally you can report it to them so they can fix it. Glad you figured it out.
I already figured that out when I discovered adblock plus was the cause of the issue. It was blocking scripts and images used for the buttons, which is why they were weird sized and suddenly 'vanish' when I click the search button. It simply blocked only peices of the code which made it behave oddly.
I had to set adblock plus to allow two frames and two images and suddenly it works (and looks) like it should.
Also thanks Giorgio for your answer. So it only lasts for the one session, which is nice to know. Thanks again for the help.