[Resolved] Embed fonts blocked without a way to allow them

[Seipas]

When you check "forbid @font-face" under "Embeddings", you can't allow the fonts of a specific website without unchecking this option. For example, once I check this option, I can't see the icons here : http://materializecss.com/icons.html even if I allow all the javascript of the website.
I'm not sure if it is the desired behaviour, if it is a general bug, or if it only happens to me (it happened suddenly, I don't remember changing my Noscript options). I thought when you allowed the scripts from the top-level domain, the embeddings were added to the page.
If it is a desired behaviour, I think it would be better to add an option to allow embeddings like fonts in the menu.

Sorry if the title or the explanation aren't clear (I'm not a native English speaker), if this bug was already reported, or if it is not a bug and I didn't understand the functioning of the feature.
Thank you for this extension !

[barbaz]

It works for me: NoScript menu > Blocked Objects, Temporarily allow all the entries involving "FONT"
No JS required.

Do you have a Blocked Objects sub-menu?
Are you blocking fonts elsewhere?
Do you have set NoScript Options > Embeddings > "Apply these restrictions to whitelisted sites too"?

[therube]

Do you have fonts blocked in FF itself?

Disable NoScript, restart FF & test.

[Seipas]

I didn't know that there was a blocked objets menu, I looked for it but didn't see it. Sorry. It works now, thank you !

I knew it was a problem with noscript since when I disabled it it worked. I don't have fonts blocked in FF itself, and I don't see why it would have come from ublock origin or decentraleyes.
However, I'm still wondering : shouldn't the font be enabled when the top level website's javascript is allowed ?
I also don't get why the font was loaded before since I didn't change anything with noscript. The only think that I changed, I think, was network.http.sendRefererHeader in about:config.


(https://noscript.net/screenshots to see the english version)
A : my parameters
B : I allowed everything on the page http://materializecss.com/icons.html
C : the noscript icon, telling me there is embedding content blocked
D : the font is not loaded
E : it appear in the blocked objects menu. I didn't knew this menu existed before, it wasn't checked in my "Appearance" tab (I may have unchecked it myself some time ago). It works if I allow it from here, but shouldn't it work with B setup ?

Also, unlike videos, there is no "placeholder icon" to allow the blocked object when it is a font. Maybe it would be easier to put such an object near the first text of the page that should have used this font ?

[barbaz]

uBlock Origin did block those fonts for me, because of the way I have it set up. I had to unblock the fonts there before I even saw the useful blocked objects entries in NoScript.

Your NoScript menu from (B) doesn't show the fonts.gstatic.com which is where those fonts originate. For users like us who don't set "Apply these restrictions to whitelisted sites too", that's a bug: viewtopic.php?f=7&t=20430

[Seipas]

Thank you for your answer !

I thought it wasn't ublock since I was able to access fonts.gstatic.com with the URL (and I was able to download the font).

I think you can close this topic, maybe ?

[barbaz]

You're welcome!

"maybe" isn't good enough to lock the thread, so we'll just mark it resolved.

[Thianis]

Looks like this problem has reappeared, though. After an update of a particular site that I'm using regularly, @font-face suddenly stopped working for me although it is marked as trusted and NoScript is supposed to allow downloading fonts from there.
The awkward thing about this: I have been using NoScript for several years now and didn't experience any problems like this so far, just until recently. So to find out what's going on I checked in Firefox with a profile specifically for testing (no plugins installed), and things were just fine.
Then I set up yet another profile for testing plugins and made a fresh(!) install of NoScript there. Same problem as with my normal user profile.

After a bit of googling around, I found out what prevented Firefox from loading any downloadable fonts, and just reset gfx.downloadable_fonts.enabled to true] in about:config. I don't know whether or not this option is supposed to be set to false by NoScript, but if yes, this is a viable workaround to the issue.
Unfortunately I haven't found any means in NoScript's settings to remedy this issue, though.

[therube]

reset gfx.downloadable_fonts.enabled to true] in about:config. I don't know whether or not this option is supposed to be set to false by NoScript

NoScript would not have affected that Preference.

[barbaz]

Thianis,

This thread is about an issue with NoScript Classic, and that issue was resolved. You appear to be using Firefox 61 and NoScript 10. Therefore, you have a different issue.

If your issue is not already resolved, please start a new thread to avoid conflating with the OP's issue.

Locking