Page 1 of 1
[FIXED] NoScript + JSON in Firefox 53
Posted: Tue Apr 25, 2017 1:00 pm
by jester
The new JSON Viewer in Firefox 53 doesn't work with NoScript unless you allow scripts for that domain and uncheck "Block scripting in whitelisted subdocuments of non-whitelisted pages". testpage:
http://httpbin.org/headers
The testpage doesn't load any scripts at all, it's just pure JSON, but NoScript blocks the Firefox parts that display the JSON in a "nicer" way. I assume "Block scripting in whitelisted subdocuments of non-whitelisted pages" does exactly what it says it does, but it would be nice if Firefox "chrome" code could be exempt from that somehow. And also not "pretend" like there's some JS when there really is not. Thanks
Re: NoScript + JSON in Firefox 53
Posted: Tue Apr 25, 2017 4:49 pm
by barbaz
jester wrote:The new JSON Viewer in Firefox 53 doesn't work with NoScript unless you allow scripts for that domain
Confirmed. The site needs to be allowed because Firefox's JSON viewer injects its own JS into the page.
This message appears in the Browser Console (Ctrl-Shift-J), but I'm not sure it's relevant as I'm seeing it even when the JSON viewer works.
Code: Select all
TypeError: hints.context is null[Learn More] chrome://noscript/content/Policy.js:64:1
jester wrote:and uncheck "Block scripting in whitelisted subdocuments of non-whitelisted pages".
Confirmed as well. This part looks like a NoScript bug to me.
Moving thread to NoScript Development.
Re: NoScript + JSON in Firefox 53
Posted: Tue Apr 25, 2017 9:46 pm
by Giorgio Maone
Investigating, thanks.
Re: NoScript + JSON in Firefox 53
Posted: Tue Apr 25, 2017 10:10 pm
by Giorgio Maone
Fixed in
latest development build 5.0.4rc1, thanks.
Re: NoScript + JSON in Firefox 53
Posted: Tue Apr 25, 2017 11:27 pm
by barbaz
Partially fixed. It now works for me with scripts forbidden. But setting noscript.restrictSubdocScripting to true still breaks it.
Re: NoScript + JSON in Firefox 53
Posted: Sat Jan 13, 2018 2:40 am
by barbaz
Bump, because this is still an issue in NoScript 5.1.8.3rc1 with Firefox 56 and Waterfox 56.
Allowing moz-nullprincipal: looks to work around this issue, but how safe is that?
Re: NoScript + JSON in Firefox 53
Posted: Thu Jan 25, 2018 2:08 am
by barbaz
bump
Re: NoScript + JSON in Firefox 53
Posted: Sun Feb 18, 2018 7:19 pm
by barbaz
Giorgio, if this is not going to be fixed in the near future, can you please provide an answer to this question? -
barbaz wrote:Allowing moz-nullprincipal: looks to work around this issue, but how safe is that?
Thanks.
Re: NoScript + JSON in Firefox 53
Posted: Tue Feb 20, 2018 11:18 pm
by Giorgio Maone
Please check
latest development build, thanks.
v 5.1.8.5rc1
=============================================================
x Fixed JSON interactive view disabled by cascading
restrictions (thanks jester for reporting)
x Fixed ABE Anon action loop with e10s enabled (thanks barbaz
for reporting)
Re: NoScript + JSON in Firefox 53
Posted: Wed Feb 21, 2018 12:12 am
by barbaz
Fixed, thank you Giorgio
