Page 1 of 3

Yahoo mail

Posted: Wed Jul 22, 2009 5:51 pm
by nagan
Not able to download pdf file from yahoo mail .Clicks on "download file " show no response.But the same is available for downoading as a blocked object in the icon context.Moreover the other flash objects blocked do not have plaxceholders! 1.9.6.9 :evil:

Re: Yahoo mail

Posted: Wed Jul 22, 2009 7:00 pm
by therube
Mail Classic or fancy shmancy?

Classic here. Sent myself a PDF.
Clicked pdf paperclick link to down. Reported no virus & then the download dialog box popped up.

Now ...

Clicked the Download File link, & with that I get no response.

paperclip:

Code: Select all

http://us.mc624.mail.yahoo.com/mc/showMessage?fid=Inbox&sort=date&order=down&startMid=0&filterBy=&.rand=463862464&midIndex=0&mid=1_4317592_AFRL...mb4zABe%2BFL%2B92c%2C&enc=auto&fn=test9.pdf&pid=2&cmd=msg.scan&ypa=1&mcrumb=KdMtwB/jIIq
download file:

Code: Select all

http://us.f624.mail.yahoo.com/ya/download?clean=0&fid=Inbox&mid=1_4317592_xxxxxxxxxxxxxSmdfLwzlHTD09Hs&pid=2&tnef=&prefFilename=test9.pdf
I did get a this in Error Console at some point:

Code: Select all

69.147.103.179#
The first time you click Download File, you'll see the progress bar (is that what its called) move & at that point the Error Console message is generated. With subsequent clicks, nothing happens. Refresh the page & you can repeat.

pic:
http://i26.tinypic.com/263hfdg.jpg


Even better, if you disable noscript.inclusionTypeChecking, you do not get anything at all.
No (automatic) download dialog when you first ... (I've got to see what version I'm running) ... 1.9.6.5, let me put in .9x ...
click the "paperclip", & nothing happens if you were to click the Download File link, & nothing in the Error Console either.


That 69.x.x.x IP is what shows in Blocked Objects.
If you Allow the 69.x.x.x, then both the first automatic download dialog box appears & also the Download File link works regardless of inclusion setting.


Something happened. After Reset & changing & Reset & ..., now I cannot get the first automatic download dialog box to appear? (Most of this testing was with 3.5.1 & I did update to NoScript 1.9.6.92.)

Re: Yahoo mail

Posted: Thu Jul 23, 2009 9:11 am
by nagan
So I suppose that there is some problem here ? Did not happen with the previous versions of NS.

Re: Yahoo mail

Posted: Thu Jul 23, 2009 9:38 am
by Giorgio Maone
Investigating, thanks for reporting.

Re: Yahoo mail

Posted: Thu Jul 23, 2009 10:39 am
by Giorgio Maone
Could you test latest development build 1.9.6.93?
It fixes the server.name# bug and some other issues which may be related to this one.
At least, I've been able to download PDF attachment in Yahoo! mail, both classic and "new", after allowing *@http://a.b.c.d for the IP appearing in Blocked Objects after the first try.

Re: Yahoo mail

Posted: Thu Jul 23, 2009 2:49 pm
by therube
I don't believe I'm seeing any change, except that with inclusion disabled, the "automatic" popup download dialog does appear.

Now if I Allow 69.x.x.x, then everything looks to work as expected, but I gather nagan was looking to not have to Allow 69.x.x.x or visit Blocked Objects.

The Error Console part of the problem is gone (69.147.103.179#).

Re: Yahoo mail

Posted: Fri Jul 24, 2009 12:57 am
by Mc
Sorry asking, but is it the same issue that I can't open any longer a local pdf file with the Foxit Reader plugin? All I get is an empty frame, if I allow file:// or not.

Re: Yahoo mail

Posted: Fri Jul 24, 2009 9:45 am
by nagan
This issue was not there before ,and why are we supposed to go thru the blocked objects route?.By the way the flash placeholders are missing?
Image

Re: Yahoo mail

Posted: Fri Jul 24, 2009 11:35 am
by Giorgio Maone
nagan wrote:This issue was not there before ,and why are we supposed to go thru the blocked objects route?
This is issue has been there for a long time (since Yahoo! started AV/scanning attachments on the fly), as testified by this FAQ
nagan wrote:By the way the flash placeholders are missing?
Maybe the Flash objects are invisible? will check later.

@Mc:
probably a separate issue, I'm investigating. Which PDF plugin are you using?

Re: Yahoo mail

Posted: Fri Jul 24, 2009 11:48 am
by Mc
Giorgio Maone wrote: @Mc:
probably a separate issue, I'm investigating. Which PDF plugin are you using?
The plugin of Foxit Reader 3.0 Build 1506

Re: Yahoo mail

Posted: Fri Jul 24, 2009 5:34 pm
by nagan
Giorgio Maone wrote:
nagan wrote:This issue was not there before ,and why are we supposed to go thru the blocked objects route?
This is issue has been there for a long time (since Yahoo! started AV/scanning attachments on the fly), as testified by this FAQ
nagan wrote:By the way the flash placeholders are missing?
Maybe the Flash objects are invisible? will check later.
I will differ with that (blocked objects?) .I was able to download last month's statement without a hassle and they were AV scanned even then.

Re: Yahoo mail

Posted: Fri Jul 24, 2009 5:54 pm
by Giorgio Maone
Please check latest development build 1.9.6.95, it fixes a bug in plugin activation which may interfere with PDF plugins.

Re: Yahoo mail

Posted: Fri Jul 24, 2009 6:04 pm
by therube
Not seeing any change in operation here.

Re: Yahoo mail

Posted: Fri Jul 24, 2009 6:47 pm
by Mc
Giorgio Maone wrote:Please check latest development build 1.9.6.95, it fixes a bug in plugin activation which may interfere with PDF plugins.
Local pdf file with Foxit Reader plugin works, thanks Giorgio. But online it loads a pdf file twice. First it loads, the plugin button appears, I'm asked for Temporarily allow and then it loads again. First load is finshed with NS_ERROR_ABORT, follwed by NS_ERROR_DOCUMENT_NOT_CACHED, then follows a reload.

Re: Yahoo mail

Posted: Fri Jul 24, 2009 7:05 pm
by Giorgio Maone
Mc wrote:First it loads
Are you sure it does? Or better, are you sure the plugin executes?

When you request plugin content as a top-level document, the browser can't tell how to open it until it sniffs its Content-type header.
That's why NoScript waits for the response being sent (at least the headers) before blocking it, whenever the content is not embedded with an explicit content type attribute (e.g. <embed type="application/pdf">).

If you're sniffing the HTTP traffic you'll see the response come down (at least the first chunk), then the request being aborted after the browser (and NoScript) sniff that the content needs to be handled by a plugin.

Therefore, even if the content partially loads (and only if it's opened as a document), the plugin never gets to execute.
Are you observing something different?