InformAction Forums

I have been using the Firefox Pocket extension for quite a while. Now it is being replaced by a service. Unfortunately, adding web pages to my Pocket list via the toolbar button does not work while NoScript is active. Possibly, the XSS function is blocking the connection. I have deactivated other extensions which could interfere as well (Adblock Plus, Ghostery). How can I allow the Pocket service to work?
My Firefox is version 30.0. The NoScript extension is v2.6.8.28; the Pocket service is v1.2.

Please post here the messages related to NoScript from the Browser Console (Ctrl-Shift-J) that you see on browser startup or when it doesn't work.

Here is what the console says:

GET https://d14bjhh1bod9ge.cloudfront.net/index.html [HTTP/1.1 304 Not Modified 31ms]
getUserData() und setUserData() sollten nicht mehr verwendet werden. Verwenden Sie stattdessen WeakMap oder element.dataset. requestNotifier.js:52
GET https://d14bjhh1bod9ge.cloudfront.net/firefoxext.css [HTTP/1.1 304 Not Modified 31ms]
Unbekannte Pseudoklasse oder Pseudoelement 'selection'. Regelsatz wegen ungültigem Selektor ignoriert. global.min.css:1
Unbekannte Eigenschaft 'zoom'. Deklaration ignoriert. global.min.css:1
Unbekannte Pseudoklasse oder Pseudoelement '-webkit-search-cancel-button'. Regelsatz wegen ungültigem Selektor ignoriert. global.min.css:1
Unbekannte Eigenschaft '-moz-border-radius'. Deklaration ignoriert. global.min.css:1
Unbekannte Eigenschaft '-moz-box-shadow'. Deklaration ignoriert. global.min.css:1
Fehler beim Verarbeiten des Wertes für 'background-image'. Deklaration ignoriert. global.min.css:1
Name einer Medienfunktion erwartet, aber '-webkit-min-device-pixel-ratio' gefunden. global.min.css:1
Fehler beim Verarbeiten des Wertes für 'display'. Deklaration ignoriert. global.min.css:1
Unbekannte Eigenschaft '-moz-border-top-left-radius'. Deklaration ignoriert. global.min.css:1
Unbekannte Eigenschaft '-moz-border-bottom-left-radius'. Deklaration ignoriert. global.min.css:1
GET https://d14bjhh1bod9ge.cloudfront.net/f ... marked.ico [HTTP/1.1 304 Not Modified 31ms]
Unbekannte Eigenschaft '-moz-border-radius'. Deklaration ignoriert. firefoxext.css:101
Unbekannte Eigenschaft '-moz-box-shadow'. Deklaration ignoriert. firefoxext.css:140
Fehler beim Verarbeiten des Wertes für 'display'. Deklaration ignoriert. firefoxext.css:313
Fehler beim Verarbeiten des Wertes für 'display'. Deklaration ignoriert. firefoxext.css:314
Fehler beim Verarbeiten des Wertes für 'display'. Deklaration ignoriert. firefoxext.css:315
Name einer Medienfunktion erwartet, aber '-webkit-min-device-pixel-ratio' gefunden. firefoxext.css:342
[NoScript] Blocking refresh on unfocused tab, http://www.lemonde.fr/economie/article/ ... 3234.html->http://www.lemonde.fr/economie/article/ ... _3234.html

Huschmand wrote:

Code: Select all

[NoScript] Blocking refresh on unfocused tab, http://www.lemonde.fr/economie/article/2014/06/24/l-etat-pourrait-financer-sa-participation-dans-alstom-grace-a-la-vente-de-3-1-de-gdf-suez_4444533_3234.html-->http://www.lemonde.fr/economie/article/2014/06/24/l-etat-pourrait-financer-sa-participation-dans-alstom-grace-a-la-vente-de-3-1-de-gdf-suez_4444533_3234.html

about:config -> set noscript.forbidBGRefresh to 0 ?

NoScript is blocking a subdomain at Cloudfront.net that the Pocket Add-On Service for Firefox is using. I had found a tweet from GetPocket indicating "getpocket.com & http://d14bjhh1bod9ge.cloudfront.net" are the two items that have to be added to NoScript whitelist. However the cloudfront.net seems to have changed and does not help. Only when cloudfront.net is added to the whitelist in NoScript does the Add-On Service for Pocket work.

pcguy wrote:NoScript is blocking a subdomain at Cloudfront.net that the Pocket Add-On Service for Firefox is using. I had found a tweet from GetPocket indicating "getpocket.com & http://d14bjhh1bod9ge.cloudfront.net" are the two items that have to be added to NoScript whitelist. However the cloudfront.net seems to have changed and does not help. Only when cloudfront.net is added to the whitelist in NoScript does the Add-On Service for Pocket work.

OK then.

Could you please be more specific what you would like help with?

Also, whitelisting all of cloudfront.net is a bad idea, it would be better if you could ferret out the exact cloudfront domain(s) Pocket uses and whitelist them individually

Well I removed the cloudfront.net whitelisting and then tried doing a CTL-SHFT-J before and after I clicking on the Pocket Add-On Service. It appears that the whitelisting has to occur on https://d14bjhh1bod9ge.cloudfront.net and http://getpocket.com once that is done the Add-On Service works.