NoScript and Firefox v52.0 breaks ebay / paypal checkout

[TS]

NoScript and Firefox v52.0 breaks ebay / paypal checkout

Can't checkout even if noscript is on or of (all scripts are allowed).
Only DISABLE noscript helps to go through paypal checkout.
Under FF v51.x all was OK.

Needs a new XXS exception?
Don't know how I can solve this...

[barbaz]

When this issue occurs, do you see anything related in the Browser Console? (Ctrl-Shift-J)
(if you don't know what's related, turn off CSS warnings and post everything else you see)

[Guest]

Start checkout and login with PayPal-User/PW.
Checkout stops, I can't do the final step.

Console without CSS, FF 52.0, after starting checkout.

Code: Select all

.
.
.
Content Security Policy: Direktive 'reflected-xss' wird nicht unterstützt. Die Direktive und ihre Werte werden ignoriert.  (unbekannt)
about:blank : Unable to run script because scripts are blocked internally.  (unbekannt)
about:blank : Unable to run script because scripts are blocked internally.  (unbekannt)
about:blank : Unable to run script because scripts are blocked internally.  (unbekannt)
about:blank : Unable to run script because scripts are blocked internally.  (unbekannt)
about:blank : Unable to run script because scripts are blocked internally.  (unbekannt)
TypeError: can't access dead object  rtcDefault.xml:105:42
about:blank : Unable to run script because scripts are blocked internally.  (unbekannt)
TypeError: can't access dead object  rtcDefault.xml:105:42
about:blank : Unable to run script because scripts are blocked internally.  (unbekannt)
about:blank : Unable to run script because scripts are blocked internally.  (unbekannt)
.
.
.

[TS]

And here for comparing the console output of FF51.0.1

Code: Select all

.
.
.
about:blank : Unable to run script because scripts are blocked internally.  (unbekannt)
Content Security Policy: Direktive 'reflected-xss' wird nicht unterstützt. Die Direktive und ihre Werte werden ignoriert.  (unbekannt)
about:blank : Unable to run script because scripts are blocked internally.  (unbekannt)
about:blank : Unable to run script because scripts are blocked internally.  (unbekannt)
about:blank : Unable to run script because scripts are blocked internally.  (unbekannt)
getPreventDefault() sollte nicht mehr verwendet werden. Verwenden Sie stattdessen defaultPrevented.  exxx.js:3:6926
Porthole: Using built-in browser support  4xxx.js:142:59
getPreventDefault() sollte nicht mehr verwendet werden. Verwenden Sie stattdessen defaultPrevented.  dxxx.js:3:6926
about:blank : Unable to run script because scripts are blocked internally.  (unbekannt)
.
.
.

Same procedure, but here I can go on and confirm the checkout.

(xxx is because spam filtering, cant't post)

[guest]

Same problem here. NoScript current version on Firefox 52 64Bits (Ubuntu 16.04).
Also only disabling this add-on helps.
No messages nor errors are being displayed in status bar nor in notification bar nor where else.
Purchasing on German ebay, paying with my German PayPal account.
Console showed error message like "scripts blocked", NS icon on toolbar was blue S on white background that time.

[Thrawn]

Hmm. Nothing in that Browser Console output looks obviously wrong to me; it certainly isn't what an XSS filter message would look like. Anyone know what rtcDefault.xml would be?

What other extensions are you running?

[TS]

Very strange behavior.

Tried many different options (also disabling) with some AddOns.
Found that:
If I disable only "TextArea Cache", i will redirect at checkout to an "old style" of PayPal-Login (express-checkout).
But this works only ONE TIME direct after disabling "TextArea Cache" and restarting firefox.
Second try of checkout - the same problem occures.

Disabling NoScript works every time.

[PauleFoul]

Here the same problem with paypal checkout in ebay account.

Only deactivating Add-On in Firefox helps

[Shinji-I]

Noscript 5.0.2 + FF 52.0.1 on Windows 10

Same problem here

[A concerned user]

Also breaks ebay+paypal for Firefox 52.0, Noscript 5.0.1 on Linux Mint 17.3 (Ubuntu 14.04)

(Rolled back to Firefox 51.0.1 while this is sorted out).

Other references:
https://www.reddit.com/r/firefox/commen ... _checkout/
https://community.ebay.com/t5/Payments/ ... p/26729308

[barbaz]

Thanks "A concerned user" for the links.

Does Allow Scripts Globally, with no sites Marked as Untrusted, get this working for anyone here?
(in about:config, make sure noscript.untrusted is default value)

Can't checkout even if noscript is on or of (all scripts are allowed).

Perhaps would help if you clarify what you mean by "all scripts are allowed". Did you mean Allow Scripts Globally, as I had assumed, or just allowing all the scripts listed in the NS menu?

[TS]

I meant "Allow scripts globally (not recommended)".
This don't work.

[PauleFoul]

Still no solution in sight?
Just rollback on Firefox 51?

[therube]

So you're on Ebay
Buy
& on the Checkout page
You select PayPal
You log into PayPal
& it is at that point that it fails (the Processing part of PayPal never completes, so never returns back to Ebay)?

Not really seeing anything in Error Console, Error or Messages.
Warning has all kind of "stuff".

Code: Select all

Warning: HTTP “Content-Type” of “text/html” is not supported. Load of media resource https://www.paypal.com/webapps/helios?state=AQABAAACQEdH7...&scope=https%3A%2F%2Furi.paypal.com%2Fservices%2Fpaypalattributes+openid+profile+email+https%3A%2F%2Fapi.paypal.com%2Fv1%2Fpayments%2F.*+https%3A%2F%2Furi.paypal.com%2Fservices%2Fpayments%2Ffunding-options&action=login&redirect_uri=https%3A%2F%2Ffedsignin.ebay.com%2Ffedauth%2FReceptorDispatcherV2&locale=en-US&cart_id=3JH538...&logout=1&client_id=ZjI5...%3D failed.
Source File: https://www.paypal.com/webapps/helios?state=AQABAAAC......YTRkYzg%3D#/checkout/login
Line: 0

[TS]

Think about the fact that it works with FF v51 and not with FF v52.
So ít might be a problem with interaction (new API / interface in FF v52 ??) and needs a revision in NoScript???

I don't know what to do...