InformAction Forums

Some BBC audio and video content is hosted on two other sites. BBC says no scripts are run from these sites. The sites do not appear in the list of sites displayed when hovering over the NoScript icon. However, in order for the content to run, the two sites have to be included in the NoScript whitelist. Adding these sites to the ABE list doesn't work. (N.B. the console log dump below says "request forbidden by antivirus" when trying to play content - however, no changes were made to any anti-virus product between failed and successful playing of the content, the only change is to the NoScript whitelist.)

Is this the behaviour that should be expected? Could someone explain what is going on here?

FireFox version: 52.0
NoScript version: 5.0.2
URL: http://www.bbc.co.uk/programmes/b007jyxq
Browser console contents:
GET
https://sa.bbc.co.uk/bbc/bbc/s [HTTP/1.1 499 Request has been forbidden by antivirus 2ms]
GET
https://sa.bbc.co.uk/bbc/bbc/s [HTTP/1.1 499 Request has been forbidden by antivirus 3ms]
GET
https://sa.bbc.co.uk/bbc/bbc/s [HTTP/1.1 499 Request has been forbidden by antivirus 3ms]
GET
https://sa.bbc.co.uk/bbc/bbc/s [HTTP/1.1 499 Request has been forbidden by antivirus 11ms]
GET
https://sa.bbc.co.uk/bbc/bbc/s [HTTP/1.1 499 Request has been forbidden by antivirus 2ms]
GET
https://sa.bbc.co.uk/bbc/bbc/s [HTTP/1.1 499 Request has been forbidden by antivirus 2ms]
GET
https://stats.bbc.co.uk/o.gif [HTTP/1.1 499 Request has been forbidden by antivirus 2ms]
GET
https://stats.bbc.co.uk/o.gif [HTTP/1.1 499 Request has been forbidden by antivirus 2ms]
GET
https://sa.bbc.co.uk/bbc/bbc/s [HTTP/1.1 499 Request has been forbidden by antivirus 2ms]
GET
https://stats.bbc.co.uk/o.gif [HTTP/1.1 499 Request has been forbidden by antivirus 2ms]
GET
https://stats.bbc.co.uk/o.gif [HTTP/1.1 499 Request has been forbidden by antivirus 3ms]
GET
https://sa.bbc.co.uk/bbc/bbc/s [HTTP/1.1 499 Request has been forbidden by antivirus 2ms]
GET
https://sa.bbc.co.uk/bbc/bbc/s [HTTP/1.1 499 Request has been forbidden by antivirus 2ms]
GET
https://stats.bbc.co.uk/o.gif [HTTP/1.1 499 Request has been forbidden by antivirus 2ms]
GET
https://stats.bbc.co.uk/o.gif [HTTP/1.1 499 Request has been forbidden by antivirus 2ms]

DeWrek wrote:in order for the content to run, the two sites have to be included in the NoScript whitelist.

Which two sites?

http://www.bbc.co.uk/programmes/b00qpjy6#play, worked with:

+bbci.co.uk
+llnwd.net
+bbc.co.uk

(That was with NoScript 2.9.5.3.)


With NoScript 5.0.2, all I need is:

+bbci.co.uk
+bbc.co.uk

(I'm not seeing +llnwd.net at all.)

Hello DeWrek,

I've just now tested the link you posted, besides bbc.co.uk and bbci.co.uk you would also need llnwd.net to be allowed to play the audiotrack.

Your issue is possibly related to/similar as this one: viewtopic.php?f=7&t=22633

I guess you should undo the changes you made in ABE.

Then when on the bbc site look if you find llnwd.net "hidden" under recently blocked list in the NS menu. If it's there you have the same issue.

You could allow it from there as a temporary workaround. Or you could install the latest NS development build, where that issue is fixed. A link to it was posted
by Giorgo Maone in that thread here viewtopic.php?f=7&t=22633&start=15#p87216.

Please let us know whether the workaround and/or development build solved your problem. If it didn't, someone else might have a solution for you.

Best regards,
Kris

My apologies for not returning to read your very helpful replies until now.

The BBC had advised me to add two sites to the NoScript whitelist, akamaized.net and llnwd.net. This allowed the content to run without problem using NoScript 5.0.2 and Firefox 52.0.

Now, NoScript has advanced to 5.0.3, and Firefox to 53.0 - and this combination requires neither site in the whitelist (although I guess it's the upgraded NoScript that allowed the removal).

Kris, I had searched the forum to see if anything similar had been reported, but got no results. Must be more thorough in future!

Thanks again for your help.

DeWrek wrote:The BBC had advised me to add two sites to the NoScript whitelist, akamaized.net and llnwd.net.

That sounds like good advice. Odd that a NoScript update would make those sites not required anymore.

Thanks for reporting back.