InformAction Forums

Since a few days (begin of july 2015) all my Firefox-versions (38.0.5 and 39.0, portable and installed) crash while
opening the newspaper-websites www.hna.de.
The processor is on maximum (1 core 100%, 2 cores 50%) and RAM-need increases very fast to more than 2 GB (4 GB installed, Win 7 pro SP1 64bit).
Than Firefox craches with showing "script not working":

http://idcdn.de/static/common/......... ... 8.min.js:9

I don't have the full path. I can only stop Firefox with closing the task in taskmanager.
I found a report about a similar problem with another daily newspaper www.tz.de (http://bigfishs.tk/input.mozilla.org/en ... ion=38.0.5):

http://idcdn.de/static/common/…e9b/glob ... bined.js:1.

So it seems to be linked to the script(s) at "http://idcdn.de".
I was able to link the problem to NoScript (after checking FF forum and informing the newspaper) by disabling all other addons one by one.
I use the latest version (today 2.6.9.30, german version) with "All scripts allowed" (!!) to use only the further functions like blocking java, flash, clearclick, ABE, XSS etc . etc.
With "blocking all scripts" it works, but I cannot use that on my "productivity-firefox".

Would an export of my NoScript-settings be helpful?

Many thanks in advance!

1) Please post URL of one or more of these crash reports (about:crashes, look for a link where the text starts with "bp-" from the time you had one of these crashes; if it doesn't start with "bp-" click it to submit that report and get a link)

2) Please try to Allow Scripts Globally (with nothing in Untrusted) and see if it works then?

3) Can you video capture the Browser Console (Ctrl-Shift-J) as that site is trying to load and is causing the problem, so we can look for related messages?


(You will need to wrap links in url tags, as follows, to avoid the board breaking them: )

Hmm, now this is interesting: http://hosts-file.net/?s=idcdn.de&view=history
(I have no idea what it means?)

1) about:crashes has no entries
2) that's what I did. "All scripts allowed". I just use the further functions like blocking java, flash, clearclick, ABE, XSS etc. etc.
If I block the scripts it works fine, because the idcdn.de scripts are blocked, too.
3) I did an screenshot, but how/from which entry should I do a video capture?
<https://www.dropbox.com/s/uojwn5wgb624f ... e.jpg?dl=0>

picard

picard wrote:1) about:crashes has no entries

???

picard wrote:2) that's what I did. "All scripts allowed". I just use the further functions like blocking java, flash, clearclick, ABE, XSS etc. etc.
If I block the scripts it works fine, because the idcdn.de scripts are blocked, too.

So why not just Mark idcdn.de as Untrusted?

picard wrote:3) I did an screenshot, but how/from which entry should I do a video capture?

What I meant was something like this:
1) Open the Browser Console, and expand it to as large a size as you can manage.
2) Set up video capture to catch the area of the screen with the Browser Console in it, then start capturing
3) Go to a "problem" URL, then quickly bring the Browser Console to the front so you can see it in the video capture.
4) Either upload the video, or grab screenshots from the video capture and stick them together such that you have one big screenshot with all the messages you caught and upload the resulting image.

???

It's empty in spite of several crashes and activated reporting (only for crashes). Does the reporting need a special port? I blocked some.
Perhaps it was not real crash, because I killed the task, but I had the tab-recovery-window, at least some times.

So why not just Mark idcdn.de as Untrusted?

I think for that I would need YesScript, and indeed it works with YesScript.
With NoScript I don't now how. I allow all scripts, and cannot block only one script/website with NoScript.

What I meant was something like this:
1) Open the Browser Console, and expand it to as large a size as you can manage.

I did. Did you check the screenshot?

2) Set up video capture to catch the area of the screen with the Browser Console in it, then start capturing
3) Go to a "problem" URL, then quickly bring the Browser Console to the front so you can see it in the video capture.
4) Either upload the video, or grab screenshots from the video capture and stick them together such that you have one big screenshot with all the messages you caught and upload the resulting image.

I was not able to activate the capturing, because the problem URL blocks any browser-windows choosing.
And where would the capture be saved? I tried it with a non-problem-website without result.

I'm not seeing any issue with the site (with scripts Allow Globally).
Though I am also not seeing anything "idcdn.de".
(Oh, & likewise, idcdn.de doesn't seem to exist to me, in general, & not much from Google either.)
Suppose it could be locale dependent?

As a test, create a new, clean Profile, install only NoScript & visit http://www.hna.de/.

With NoScript I don't now how. I allow all scripts, and cannot block only one script/website with NoScript.

With Allow Global, by default every site should still be listed on the NoScript icon with the option to "Mark xyz.com as Untrusted".
(That way, you still have Allow Global, but additionally, you have the specific site(s) blacklisted.)

Also are those Error Console "noscript" references relating to "NoScript" (extension) or "noscript" a HTML tag?

NoScript.

(I see the messages in FF 39 but not in SeaMonkey 2.33.1.)

Though I am also not seeing anything "idcdn.de".

Scratch that, I am seeing it?
Either it wasn't there the first time & now it is, or I just missed it.
(Thought it still seems to be dead?)

picard wrote:

So why not just Mark idcdn.de as Untrusted?

I think for that I would need YesScript, and indeed it works with YesScript.
With NoScript I don't now how. I allow all scripts, and cannot block only one script/website with NoScript.

Er.. no.
NoScript menu > Untrusted > Mark [..] as Untrusted
(if you haven't selected "Untrusted" and/or "Mark [...] as Untrusted" to show in the NoScript menu, then you may need to go into NoScript Options > Appearance and do that first)

barbaz wrote: Er.. no.
NoScript menu > Untrusted > Mark [..] as Untrusted
(if you haven't selected "Untrusted" and/or "Mark [...] as Untrusted" to show in the NoScript menu, then you may need to go into NoScript Options > Appearance and do that first)

Thanks, I found it. Nevertheless I am not able to activate, because opening the website immediately makes the browser unusable.
Is there a file to add the URL offline?

I found a workaround:
1. Use of YesScript (has an offline-function to add URLs to block!) to be able to load www.hna.de
2. Use NoScript to "Mark [..] as Untrusted"
3. Uninstall YesScript

It works!

Thanks!