Page 1 of 2
NoScript & Tumblr
Posted: Sun Mar 20, 2016 9:44 pm
by Cynyster
Hello everyone.
I spent the last hour trying to figure out why I could not get the login page to
Tumblr to render properly.
I have determined that it is indeed
"NoScript" that is the issue.
Allowing scripts globally still does not correct the issue.
Only Disabling the
NoScript plugin allows the login page to load properly.
With how configurable
NoScript is I am certain that I am just missing how to set up
NoScript to allow the site to work properly without giving up the protections of
NoScript.
I am sure I am not the only one with this issue.
Can someone tell me what exceptions to allow in order for the login page to operate properly?
Thank you for your time.

Re: NoScript & Tumblr
Posted: Sun Mar 20, 2016 9:46 pm
by barbaz
URL of the login page?
Does it require actually logging in (or trying to log in) to see the issue?
When this issue occurs, do you see anything related in the Browser Console? (Ctrl-Shift-J)
(if you don't know what's related, turn off CSS warnings and post everything else you see)
Re: NoScript & Tumblr
Posted: Mon Mar 21, 2016 12:43 am
by Cynyster
Hello
The login URL is
https://www.tumblr.com/login
It doesn't require logging in.
The form fields for logging in seem to incorrectly displayed.
The page seems to have one of those scripts that do not allow you to enter the password until after the login is entered.
Similar to how Google services has their login.
This is what is looks like with NoScript Enabled
http://www.cynyster.com/Bad.jpg
This is what it is supposed to look like
http://www.cynyster.com/Good.jpg
Thanks for your reply

Re: NoScript & Tumblr
Posted: Mon Mar 21, 2016 2:24 pm
by barbaz
WFM as soon as I Allow tumblr.com ...
Never saw the sort of "bad" in your screenshot.
Re: NoScript & Tumblr
Posted: Mon Mar 21, 2016 5:08 pm
by Cynyster
barbaz wrote:WFM as soon as I Allow tumblr.com ...
Never saw the sort of "bad" in your screenshot.
It's the same on every one of my machines(5).
even if I have "Allow Scripts Globally (Dangerous)"
It seems a bit more basic / core of an issue to me.

Re: NoScript & Tumblr
Posted: Mon Mar 21, 2016 5:35 pm
by barbaz
Well this is an odd one. Could you please post your list of extensions?
Re: NoScript & Tumblr
Posted: Tue Mar 22, 2016 1:59 am
by Cynyster
barbaz wrote:Well this is an odd one. Could you please post your list of extensions?
In order to test this I removed all my addons except
NoScript 2.9.0.9 &
RoboForm Toolbar 7.9.16.9
Again this strange occurance shows up even if NoScript is set to globally allow scripts.
yes very wierd

Re: NoScript & Tumblr
Posted: Tue Mar 22, 2016 3:06 am
by barbaz
RoboForm has been known to cause odd conflicts in the past, please try without that
Re: NoScript & Tumblr
Posted: Tue Mar 22, 2016 12:07 pm
by Cynyster
Ok I wrote a very long post going through all the steps I went through to solve this issue
But apparently there is a time out on posting.
The problem apparently was my NoScript settings.
Resetting NoScript fixed the issue.
I still have the setting saved in case anyone is interested.
Njoy
Re: NoScript & Tumblr
Posted: Tue Mar 22, 2016 2:02 pm
by barbaz
Thank you for saving the "bad" settings.
Can you please PM me a copy? Maybe we can find the root cause, so that you won't have to lose all of it.
Re: NoScript & Tumblr
Posted: Wed Mar 23, 2016 1:45 pm
by barbaz
Thanks. I can reproduce the problem with those settings.
You have a number of user-modified default
surrogate script that have since had more bugs fixed in them. I would suggest you upgrade NoScript to latest version and reset all of the default surrogates you modified. Your settings export indicates you maybe running NoScript 2.7...
(The specific fix here is to go to about:config and reset noscript.surrogate.ga.replacement which the older version you're running borked many sites after NoScript mostly canned its usage of __noSuchMethod__.)
(What is noscript.blockNSWB ?)
Re: NoScript & Tumblr
Posted: Fri Mar 25, 2016 9:48 am
by Cynyster
5th try (the first 4 was blocked by the spam filter (something in your reply I think))
You just blew out of my sphere of knowledge.
The only deliberate changes I have made was to tha XSS Tab under Advanced Options.
The couple of sites I was on, crossposted on purpose and I needed to allow it.
Other than that any changes I made were through the menus. (allow this site, disallow that site.. temporarily allow this page etc)
I had only saved the settings to make an attempt to sync the NoScript settings on the 6 machines I work from. To avoid having to redo all the settings on each machine.
Those settings are several years old so its probably best to dump them and start fresh.
What could you recommend that would help me sync my settings without falling prey to having outdated rules?
Thank you for your time.

Re: NoScript & Tumblr
Posted: Fri Mar 25, 2016 1:49 pm
by barbaz
Cynyster wrote:5th try (the first 4 was blocked by the spam filter (something in your reply I think))
If the spam filter gives you too much trouble you can PM an active Mod (me, GµårÐïåñ, therube, or Thrawn) and we'll try to post it for you. PMs to forum staff are not spam filtered, and the spam filter is more lenient on us.
Cynyster wrote:What could you recommend that would help me sync my settings without falling prey to having outdated rules?
Well, first things first, what NoScript version are you actually running? Or are you syncing settings between different versions of NoScript?
Only the latest NoScript - including, to some extent, the default settings - is fully compatible with Firefox 45.
(NoScript cannot be expected to be forward-compatible; that isn't technically possible.)
Also note that when I was testing this, I imported your settings into NoScript 2.9.0.10rc1, so if you are really using an outdated NoScript it's possible some of what I saw as user-set preferences are actually just the old defaults.
Re: NoScript & Tumblr
Posted: Fri Mar 25, 2016 2:04 pm
by barbaz
So, to put this a bit differently, maybe you could try this procedure to fix things back up?
(You already have a backup of your existing settings. Make sure you have that on hand before you start this, in case this goes wrong in some way.)
1) create a new
profile, install only latest NoScript (you choose stable version or dev channel)
2) in your main profile, go to NoScript Options > Whitelist, export *only* the whitelist (*not* the export button on the very bottom). Your Untrusted list will also be exported in this step.
3) Copy the XSS settings you want to keep, paste them somewhere else for the moment (e.g. a text editor)
4) Go back to the new profile, and delete everything from the whitelist there (unless you want to have the default whitelist added to your whitelist)
5) Import the whitelist: use the Import button next to the Export button you used in (2)
6) Put back your XSS settings, click OK
7) Export that entire NS config
Now, on all the profiles you sync NS settings, reset NoScript then update NoScript to the latest version. Then restore the settings backup you made.
Re: NoScript & Tumblr
Posted: Fri Mar 25, 2016 5:26 pm
by Cynyster
Ok that will work for me. I will just save it in my "setting folder" on my thumbdrive I take everywhere (Its the place I save all the setting for a variety of programs I use).
I always have the stable releases auto update. so at this writing its: 2.9.0.10
Thanks for all your help!!!!
I feel a donation incoming!
