NoScript silently disappeared until a browser restart
Posted: Tue Nov 28, 2017 6:01 am
I just ran into a serious bug in the new NoScript. I don't know when, but probably within the past 24 hours, it just quietly "uninstalled" itself.
Well, not really. But I noticed scripts running on a page I didn't recall allowing them for, reached for the NoScript button to check what was allowed on that page, and the button was missing from the toolbar! I went to about:addons to see what was going on with it, and it was still listed there, not as deactivated or "will be removed when Firefox restarts" or anything, nor as "legacy". I selected "options" but Firefox incorrectly displayed a blank page instead of the NoScript options screen.
Restarting the browser seems to have restored things to correct behavior -- for now. But this incident is extremely disturbing.
1. Security software should not suddenly cease protecting the user without a user-initiated reason (clicked to turn it off or etc.)
2. Security software should definitely never silently cease protecting the user. Any deactivation should be accompanied by a modal dialog box, and that should include a "cancel" option to keep it from deactivating.
3. Obviously there is also a bug of some kind in the options screen code.
Well, not really. But I noticed scripts running on a page I didn't recall allowing them for, reached for the NoScript button to check what was allowed on that page, and the button was missing from the toolbar! I went to about:addons to see what was going on with it, and it was still listed there, not as deactivated or "will be removed when Firefox restarts" or anything, nor as "legacy". I selected "options" but Firefox incorrectly displayed a blank page instead of the NoScript options screen.
Restarting the browser seems to have restored things to correct behavior -- for now. But this incident is extremely disturbing.
1. Security software should not suddenly cease protecting the user without a user-initiated reason (clicked to turn it off or etc.)
2. Security software should definitely never silently cease protecting the user. Any deactivation should be accompanied by a modal dialog box, and that should include a "cancel" option to keep it from deactivating.
3. Obviously there is also a bug of some kind in the options screen code.