InformAction Forums

The Rdio website is just the most recent time I've noticed this.

There are many sites I've been to where "temporarily allow all" still does not get the page to function properly.

Currently, on the Rdio registration page if I allow all and try to click the Facebook registration button the page does not respond at all. If I look at blocked and untrusted there are no other scripts I can see for the site that I can enable to make it work correctly. As far as I can tell, the problem is that NoScript is not able to see all of the scripts the site is trying to run... otherwise they would show up on SOME list, right?

This seems to be happening more frequently lately (at least in my experience). I have to imagine this is representative of some new web design methodology where scripts are being called or utilized in such a way that NoScript isn't even detecting that they're being called? That's my best guess at least...

When it fails, do you see anything related in the Browser Console? (Ctrl-Shift-J)
(if you don't know what's related, turn off CSS warnings and post everything else you see)

I just had the same issue on the PetSmart page when trying to recover a forgotten password. I'll post both Browser Console logs in a few minutes.

Here is an album of screenshots of the problems http://imgur.com/a/uaoBf

Image 1 and 2 are Rdio (no temp permissions and allow all temp permissions)

Image 3 and 4 are PetSmart (no temp and allow all)

Nothing obvious with Rdio, but as for the Petsmart messages, this is now the second case I've seen where NoScript does _something_ to make the same-origin policy stricter.. but no clue what exactly that is, sorry.

URL: https://www.rdio.com/account/signin/

Looks like rdio signin needs something like this:

+akamaihd.net
+facebook.net
+rdio.com

Also facebook opens in a pop-up window, so if you have something blocking pop-ups that could also be an issue.

(I didn't actually try using facebook, so don't know if facebook.com may also be needed, but the 3 above will at least get you to facebook's login.)

(Actual playback will additionally need various cloudfront.net domains.)