Why is this page partially blocked and how do I fully unbloc

[tieTYT]

Here's a screenshot:



Click on the image to see the noscript popup on the right.

I'm visiting a local file in firefox. I've whitelisted localhost and file:// but it still says something is partially blocked. Yet, I don't see any option to unblock anything. Perhaps this is blocked because of an XSS issue? I think what is being blocked is this livereload script I have set up when I develop. Here's what that script looks like in the html:

Code: Select all

<script src="http://localhost:35729/livereload.js"></script>

For this file, I'd like everything unblocked. How do I do that? I don't see any option available.

[barbaz]

What version of NoScript are you using?

When it fails, anything related in the Browser Console (Ctrl-Shift-J)?
If it's ABE that's giving you trouble, you'll probably need to modify the SYSTEM rule something like

Code: Select all

# Prevent Internet sites from requesting LAN resources.
Site LOCAL
Accept from LOCAL file:
Deny

[tieTYT]

Thanks for the quick reply. I'm using NoScript 2.6.8.39.

I don't see anything relevant in the Browser Console.

I added ^.*$ to the XSS exceptions and this had no effect on this page, so it must not be that.

If ABE is failing, I don't get any feedback about that. I added that as a SYSTEM rule and didn't notice any effect.

FWIW, this was working at least 2 days ago. Was there a recent upgrade? Can I downgrade to the previous version?

[barbaz]

Can I downgrade to the previous version?

http://noscript.net/feed?c=100&t=a
ETA If you have time, please post what is the most recent rc version which works correctly for you.

[tieTYT]

OK the problem went away when I installed 2.6.8.37 rc2. I installed every version after that and the problem didn't go away until I installed this version.

If a new version of noscript comes out, will it automatically update me to it? I don't want to be stuck on this vulnerable version after the bug (?) is fixed.

[barbaz]

Thanks for the info.

If a new version of noscript comes out, will it automatically update me to it? I don't want to be stuck on this vulnerable version after the bug (?) is fixed.

AFAIK it's not "vulnerable", just buggy. see the changelog

If you have automatic updates on, you're going to end up with 2.6.8.40rc1 which you say is affected, and there's nothing you'll be able to do about it.
If you turn off automatic updates, you can keep that old version as long as you need to, but if Giorgio decides this needs to be fixed inside NS you will need to manually update when Giorgio says to check latest development build.

You can check two places to determine/set whether you'll get automatic updates:
Tools -> Add-ons Manager -> gear icon -> Update Add-ons Automatically
*or*
Add-ons Manager -> NoScript -> More -> Automatic Updates:

[barbaz]

OK, reproduced with a local server.
I've filed a more detailed bug report: viewtopic.php?f=10&t=20024

[barbaz]

Should be fixed in latest development build 2.6.8.40rc2