InformAction Forums

( Copy and pasted from https everywhere issue tracker. https://github.com/EFForg/https-everywhere/issues/1352 )

I encountered a interaction between https-everywhere and noScript, which conspire to render Firefox nightly unusable when trying to play a youtube Video. ( I will also submit this bugreport to noScript, no idea where to fix this issue. )

Steps to reproduce

• Visit http://www.sfsignal.com/archives/2015/0 ... st-pixels/
  Open sidebar ( CTRL-H ) it seems to be important that the Video container is smaller than the player, such that the controls are partially occluded.
  Try to use the "Watch on youtube.com" button.
  Result: Firefox hangs.

Output of Firefox: https://gist.github.com/yoshi-k/2081ce69e7bd32a64413

Versions:

• Firefox nightly 40.0a1
  NoScript 2.6.9.20
  HTTPS Everywhere 5.0.1

  Code: Select all

  $uname -a
  Linux Angmar 3.19.2-1-ARCH #1 SMP PREEMPT Wed Mar 18 16:21:02 CET 2015 x86_64 GNU/Linux

yoshi wrote:Visit http://www.sfsignal.com/archives/2015/0 ... st-pixels/

The board broke your link, please edit your post and replace the link wrapped in url tags so that doesn't happen, thanks.
(like this: )

Oh, sorry. The url is:

http://www.sfsignal.com/archives/2015/0 ... st-pixels/

Can't reproduce in SeaMonkey nightly.

Do you have e10s enabled?
If you disable HTTPS Everywhere and put the HTTPS Everywhere rulesets into NoScript's Force HTTPS feature (NoScript Options > Advanced > HTTPS > Behavior), can you still reproduce the problem?

With NoScript 2.6.9.21 the bug no longer appears at sfsignal, but I have seen it on reddit. I will try to build a test case on the weekend.

I looked a bit into it again and have now updated to
FF nightly 40.0a1 (2015-04-10)
NoScript 2.6.9.21

First of all the sfsignal link still crashes the browser ( sorry for the misinformation
That was related to e10, with e10 enabled it works. ( It does not with e10 switched off.)

It also works, if NoScript's Clear Click is switched off. Hopefully interestingly, if I turn Clear Click off and then on again, it works until the end of the session but reverts to the old behavior, that is FF hangs, after a FF restart. ( If Clear Click needs a browser restart, it does not display a warning in about:addons.)

The browser also crashes when all rules in HTTPS everywhere are turned off.

Additionally I tried to build a test case, based on the assumption that the issue may be related to a youtube iframe inside of an too small div container, but in that case I could only get a warning, apparently from NoScript.
Testpage:
https://gist.github.com/yoshi-k/c159db8 ... tpage-html
http://bl.ocks.org/yoshi-k/c159db8c4a8b ... index-html ( Turns out one can host gists at github.)
Error message (console output):
https://gist.github.com/yoshi-k/377a0c3 ... 3-4-15-txt

So it's not forcing HTTPS that's part of the trigger but something (else?) in HTTPS Everywhere itself.

I think with the info you've provided in your latest post I've offered all I can here atm, time for me to leave this bug report alone for the moment and let Giorgio investigate from here.

Hi, just remembered to check this bug with the latest nightly version, 41.0a1 (2015-05-27) and apparently the issue is resolved there.