InformAction Forums

NoScript (great extension!!) just updated and it broke access to googlefonts for a site I am developing locally. I have been working on it for a week and the font has loaded all the time. Now after working several hours this morning I restarted Firefox and was greeted by the update info page for NoScript. And suddenly the googlefont can't be downloaded anymore. If I disable NoScript the font is downloaded.

Was this an intentional change?

Inspection message:

I've just noticed the exact same behavior, also with a Google font... I've been working on that website for a week now and the two Google fonts I'm using in it were working just fine. NoScript says it blocked an XSS attempt.
I'm trying to add an XSS exception but I'm no good with regex...

I just disabled NoScript.
I probably wont re-enable it until I am done with the site in question.
Which is sad, because I like to browse the web with NoScript when I am not coding.
I hope the devs will chime on with a word on this issue.

Same issue here, killed Google fonts. Please re-enable or give us the option to.

Same here, google fonts only load with noscript disabled

Does downgrading NoScript to a version where this was known to work, actually get it back working?
If so, what is the last working rc version?

Old NoScript @
https://addons.mozilla.org/addon/noscript/versions
*or*
https://noscript.net/feed?c=100&t=a

Same error here. I just updated NoScript today (never had any prior issues with Google Fonts). Both of my websites use custome Google Fonts, however they will not load at all anymore unless I disable NoScript entirely (not something I feel comfortable doing when browsing the internet). Any chance of a hotfix?

barbaz wrote:Does downgrading NoScript to a version where this was known to work, actually get it back working?
If so, what is the last working rc version?

Just tried rolling back.
Version 2.9.0.5rc2 is that last one that works.
Version 2.9.0.5rc3 breaks google fonts.

Thank you for reporting your findings. We have a lot of threads here about 2.9.0.5 breaking things...

build 2.9.0.5 breaks many large sites that use Google Fonts

Browser console shows Firefox bad URI for fonts.gstatic.com even with NoScript XSS turned off
No Google Fonts load

Fix: downgrade to 2.9.0.4 and turn off auto-update.

Its breaking other Google API calls as well thus breaking my WP post editing and page viewing ability.

[NoScript InjectionChecker] JavaScript Injection in ///u/0/se/0/_/ 1/fastbutton?usegapi=1&size=medium&hl=en&origin=http://www.[website].com&url=http://www.[website].com/?p=31917&gsrc=3p&ic=1&jsh=m;/_/scs/apps-static/_/js/k=oz.gapi.en.W5w9FDjqfRM.O/m=__features__/am=AQ/rt=j/d=1/rs=AGLTcCNDePu8MnLgpAM5USOnhNImDn9cnA#_methods=onPlusOne,_ready,_close,_open,_resizeMe,_renderstart,oncircled,drefresh,erefresh,onload&id=I0_1458288817041&parent=http://www.[website].com&pfname=&rpctoken=20719038
(function anonymous() {
_methods=onPlusOne,_ready,_close,_open,_resizeMe,_renderstart,oncircled,drefresh,erefresh,onload /* COMMENT_TERMINATOR */
DUMMY_EXPR
})

[NoScript XSS] Sanitized suspicious request. Original URL [https://apis.google.com/u/0/se/0/_/+1/fastbutton?usegapi=1&size=medium&hl=en&origin=http%3A%2F%2Fwww.[website].com&url=http%3A%2F%2Fwww.[website].com%2F%3Fp%3D31917&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en.W5w9FDjqfRM.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCNDePu8MnLgpAM5USOnhNImDn9cnA#_methods=onPlusOne%2C_ready%2C_close%2C_open%2C_resizeMe%2C_renderstart%2Concircled%2Cdrefresh%2Cerefresh%2Conload&id=I0_1458288817041&parent=http%3A%2F%2Fwww.[website].com&pfname=&rpctoken=20719038] requested from [http://www.[website].com/?p=31917&pagefrog_preview=fbia&preview=true]. Sanitized URL: [https://apis.google.com/#1731787890023957460].

Please check latest development build 2.9.0.6rc1, thanks.

For my websites at least, the Google fonts problem in 2.9.0.5 has been fixed in 2.9.0.6rc1.

Many thanks for prompt response.

JPL

fixed in 2.9.0.6 for me ( Firefox ESR 38.7.1)

2.9.0.6 works here as well.
Ottimo!

Thanks for the quick fix!