Page 1 of 1
[Resolved] Yahoo email Firefox temporary lockups
Posted: Fri Aug 22, 2014 2:04 am
by Guest
When using NoScript while attempting to use Yahoo email through Firefox, I recently have started getting frequent temporary Firefox lockups. For example, if you click on email in your inbox, then you can't change Browser tabs for several seconds. Other email-related actions that I haven't written down also trigger the lockup. This happens even if I have NoScript set to "Allow scripts globally (dangerous)". However, if I disable NoScript entirely and start up Firefox, the lockups don't happen. Same issue on two separate PCs. I have yahoo.com and yimg.com allowed. Anything I can do to prevent this?
Re: Yahoo email Firefox temporary lockups
Posted: Fri Aug 22, 2014 2:38 am
by barbaz
make sure you're using noscript
latest development build
(it fixes a similar yahoo issue)
Re: Yahoo email Firefox temporary lockups
Posted: Fri Aug 22, 2014 7:02 pm
by Guest
I am using 2.6.8.36 (the latest development build at the moment) when I see the issue.
Re: Yahoo email Firefox temporary lockups
Posted: Fri Aug 22, 2014 7:50 pm
by DJ-Leith
Hi Guest,
I am using NoScript 2.6.8.37rc2
Guest wrote:
I am using 2.6.8.36 ...
you are using the "latest stable version".
barbaz is saying try the latest DEVELOPMENT version (AKA rc version).
From the change log (below) you can see, in NoScript 2.6.8.37rc1, that Giorgio Maone
has worked around the recent issues at Yahoo!
I think this will help you.
I use the rc versions.
Recent all builds from noscript.net
http://noscript.net/feed?c=200&t=a
NoScript 2.6.8.37rc2
14 August 2014 23:12
x [XSS] Support for new insidious ES6 constructs introduced in Firefox 34
(thanks .mario for reporting)
x [HTTPS] Experimental "Allow HTTPS scripts globally on HTTPS documents"
mode
NoScript 2.6.8.37rc1
29 July 2014 22:42
x [Surrogate] Yahoo! "DARLA" ads loader post-execution surrogate prevents
the browser from stalling due to the many window.name-based XSSes
intentionally used by this ads delivery script
...
DJ-Leith
Re: Yahoo email Firefox temporary lockups
Posted: Fri Aug 22, 2014 7:50 pm
by barbaz
Guest wrote:I am using 2.6.8.36 (the latest development build at the moment)
no.
latest dev build is 2.6.8.37rc2
http://noscript.net/feed?t=b
Re: Yahoo email Firefox temporary lockups
Posted: Sat Aug 23, 2014 12:49 am
by Guest
Sorry, my mistake, I saw 2.6.8.36 mentioned on that page and didn't read far enough. Ok, I now have 2.6.8.3rc installed. However I do still seem to be getting lockups even with the release candidate version.
Other info that may or may not be of interest: I also have a Frontier.com email account (which uses Yahoo email in some way, both the Frontier and Yahoo logos are on it) in addition to regular Yahoo email, both accounts have the same issue. However, although the length and timing of the lockups seems somewhat random, on average it feels as though the Frontier Yahoo email lockups can be much longer than the ordinary Yahoo email lockups.
Re: Yahoo email Firefox temporary lockups
Posted: Sat Aug 23, 2014 2:09 am
by barbaz
When it "locks up", any related messages in the Browser Console? (Ctrl-Shift-J)
Re: Yahoo email Firefox temporary lockups
Posted: Sat Aug 23, 2014 4:45 am
by Guest
Here's what gets written to the browser consule during a test of my Frontier/Yahoo mail, clicking on an email then trying to click back and forth between two tabs, although I don't know what it means:
POST
https://us-mg6.mail.yahoo.com/neo/logger [HTTP/1.1 200 OK 375ms]
GET
https://sb.scorecardresearch.com/p [HTTP/1.1 200 OK 31ms]
GET
https://us-mg6.mail.yahoo.com/neo/darla/php/fc.php [HTTP/1.1 200 OK 453ms]
GET
https://csc.beap.bc.yahoo.com/yi [HTTP/1.1 200 OK 234ms]
GET
https://ad.yieldmanager.com/csync [HTTP/1.1 500 Internal Server Error 437ms]
GET
https://cdnk.interclick.com/beacon.gif [HTTP/1.1 200 OK 188ms]
GET
https://csync.yahooapis.com/csync [HTTP/1.1 200 OK 297ms]
GET
https://av.beap.bc.yahoo.com/av [HTTP/1.1 200 OK 344ms]
nsIJSON.decode is deprecated. Please use JSON.parse instead. noscriptService.js:3082
[NoScript InjectionChecker] HTML injection:
<html><head></head><body><script type="text/javascript">/* All portions of this software are copyright (c) 2003-2006 Right Media*/var rm_ban_flash=0;var rm_url="";var rm_pop_frequency=0;var rm_pop_id=0;var rm_pop_times=0;var rm_pop_nofreqcap=0;var rm_passback=0;var rm_tag_type="";var rm_md_purl_det=0;var rm_md_purl_dec=0;var rm_md_purl_st_ref=0;var rm_st_referrer="";var rm_md_purl_unknown=0;var rm_enable_ck_mp=0;var rm_ck_mp_cu="";rm_md_purl_det = "4"; rm_md_purl_dec = "3"; rm_md_purl_st_ref = "5"; rm_st_referrer = "
http://us-mg6.mail.yahoo.com"; rm_md_purl_unknown = "0"; rm_enable_ck_mp = 1; rm_tag_type = "iframe"; rm_url = "
https://ads.yahoo.com/imp?Z=160x600&cb= ... BLSxjdCQyN
[NoScript XSS]: sanitized window.name, "pos=SKY&id=tgtSKY&html=%253C%2521--%2520APT%2520Vendor%253A%2520Right%2520Media%252C%2520Format%253A%2520Standard%2520Graphical%2520--%253E%250A%253Chtml%253E%253Chead%253E%253C/head%253E%253Cbody%253E%253Cscript%2520type%253D%2522text/javascript%2522%253E/*%2520All%2520portions%2520of%2520this%2520software%2520are%2520copyright%2520%2528c%2529%25202003-2006%2520Right%2520Media*/var%2520rm_ban_flash%253D0%253Bvar%2520rm_url%253D%2522%2522%253Bvar%2520rm_pop_frequency%253D0%253Bvar%2520rm_pop_id%253D0%253Bvar%2520rm_pop_times%253D0%253Bvar%2520rm_pop_nofreqcap%253D0%253Bvar%2520rm_passback%253D0%253Bvar%2520rm_tag_type%253D%2522%2522%253Bvar%2520rm_md_purl_det%253D0%253Bvar%2520rm_md_purl_dec%253D0%253Bvar%2520rm_md_purl_st_ref%253D0%253Bvar%2520rm_st_referrer%253D%2522%2522%253Bvar%2520rm_md_purl_unknown%253D0%253Bvar%2520rm_enable_ck_mp%253D0%253Bvar%2520rm_ck_mp_cu%253D%2522%2522%253Brm_md_purl_det%2520%253D%2520%25224%2522%253B%2520rm_md_purl_
nsIJSON.decode is deprecated. Please use JSON.parse instead. noscriptService.js:3082
[NoScript InjectionChecker] HTML injection:
<html><head></head><body><script type="text/javascript">/* All portions of this software are copyright (c) 2003-2006 Right Media*/var rm_ban_flash=0;var rm_url="";var rm_pop_frequency=0;var rm_pop_id=0;var rm_pop_times=0;var rm_pop_nofreqcap=0;var rm_passback=0;var rm_tag_type="";var rm_md_purl_det=0;var rm_md_purl_dec=0;var rm_md_purl_st_ref=0;var rm_st_referrer="";var rm_md_purl_unknown=0;var rm_enable_ck_mp=0;var rm_ck_mp_cu="";rm_md_purl_det = "4"; rm_md_purl_dec = "3"; rm_md_purl_st_ref = "5"; rm_st_referrer = "
http://us-mg6.mail.yahoo.com"; rm_md_purl_unknown = "0"; rm_enable_ck_mp = 1; rm_tag_type = "iframe"; rm_url = "
https://ads.yahoo.com/imp?Z=120x45&cb=1 ... dCQyNSx5Yn
[NoScript XSS]: sanitized window.name, "pos=TL1&id=tgtTL1&html=%253C%2521--%2520APT%2520Vendor%253A%2520Right%2520Media%252C%2520Format%253A%2520Standard%2520Graphical%2520--%253E%250A%253Chtml%253E%253Chead%253E%253C/head%253E%253Cbody%253E%253Cscript%2520type%253D%2522text/javascript%2522%253E/*%2520All%2520portions%2520of%2520this%2520software%2520are%2520copyright%2520%2528c%2529%25202003-2006%2520Right%2520Media*/var%2520rm_ban_flash%253D0%253Bvar%2520rm_url%253D%2522%2522%253Bvar%2520rm_pop_frequency%253D0%253Bvar%2520rm_pop_id%253D0%253Bvar%2520rm_pop_times%253D0%253Bvar%2520rm_pop_nofreqcap%253D0%253Bvar%2520rm_passback%253D0%253Bvar%2520rm_tag_type%253D%2522%2522%253Bvar%2520rm_md_purl_det%253D0%253Bvar%2520rm_md_purl_dec%253D0%253Bvar%2520rm_md_purl_st_ref%253D0%253Bvar%2520rm_st_referrer%253D%2522%2522%253Bvar%2520rm_md_purl_unknown%253D0%253Bvar%2520rm_enable_ck_mp%253D0%253Bvar%2520rm_ck_mp_cu%253D%2522%2522%253Brm_md_purl_det%2520%253D%2520%25224%2522%253B%2520rm_md_purl_
POST
https://us-mg6.mail.yahoo.com/stats/ymstat [HTTP/1.1 200 OK 282ms]
Re: Yahoo email Firefox temporary lockups
Posted: Sat Aug 23, 2014 10:07 am
by Thrawn
That sounds similar to the previous Yahoo performance issue, where they're using XSS to perform ad delivery, so the XSS filter has to go crazy checking all of their requests. Giorgio had to work around it; maybe an extra workaround is needed.
Re: Yahoo email Firefox temporary lockups
Posted: Sun Aug 24, 2014 11:51 pm
by Giorgio Maone
Please check
latest development build 2.6.8.38rc1, thanks.
Re: Yahoo email Firefox temporary lockups
Posted: Tue Aug 26, 2014 2:03 am
by Guest
Although it does seem to eliminate the delay on the things I can test so far such as clicking email then clicking a browser tab, 2.6.8.38 unfortunately seems to be preventing necessary email functionality from working; I can't compose email anymore (clicking "compose" does nothing at all, I don't see anything I can unblock either), if I check an email box and click on delete, that tab displays an envelope graphic with "1" superimposed over it and the entire web page (just within that tab, other tabs are fine) goes gray and locks up (I can still use that tab to go to other web pages, or get that one working again by going to it again via bookmark.).
Re: Yahoo email Firefox temporary lockups
Posted: Tue Aug 26, 2014 7:29 am
by Giorgio Maone
Notice that security-related changes in browser standards may break this idiotic DARLA behavior in a (hopefully near) future, see
my comment in the
relevant Mozilla bug.
Anyway, please try
latest development build 2.6.8.39rc1, thanks.
Re: Yahoo email Firefox temporary lockups
Posted: Tue Aug 26, 2014 3:08 pm
by Guest
The disabled functionality is back in 2.6.8.39rc1, but so are the lockups unfortunately.
Re: Yahoo email Firefox temporary lockups
Posted: Sun Aug 31, 2014 4:51 am
by Guest
The 2.6.8.39 public release seems to be working well, without the delays.
