Page 1 of 2
NoScript is blocking my email access
Posted: Tue May 01, 2018 7:44 pm
by The-unknown-user
I hope it's not too late to pose a question about a "legacy" version of NoScript. I have a Microsoft "Live" email account. Since they have been force-feeding me its new email version, I can no longer log in to it with NoScript activated, I get an error message, and this is even with allowing all scripts. In order to access my email I have to totally deactivate NoScript. Any ideas what I can do to fix this? Is there a way to only deactivate NoScript on my email? This is NS version 2.9.5.3. Thank you.
Re: NoScript is blocking my email access
Posted: Tue May 01, 2018 11:12 pm
by Giorgio Maone
Why aren't you using
NoScript 5.x "Classic"?
Re: NoScript is blocking my email access
Posted: Tue May 01, 2018 11:39 pm
by The-unknown-user
I'll try it and report back.
Re: NoScript is blocking my email access
Posted: Tue May 01, 2018 11:42 pm
by The-unknown-user
Still doesn't work. Anything else to try?
Re: NoScript is blocking my email access
Posted: Tue May 01, 2018 11:58 pm
by barbaz
When this issue occurs, do you see anything related in the Browser Console? (Ctrl-Shift-J)
(if you don't know what's related, turn off CSS warnings and post everything else you see)
Re: NoScript is blocking my email access
Posted: Wed May 02, 2018 2:42 am
by The-unknown-user
Here it is:
Code: Select all
SyntaxError: An invalid or illegal string was specified jot_min_view__en.js:506:0
Blocking reflected script inclusion origin XSS from https://forums.linuxmint.com/viewtopic.php?f=90&t=268747&sid=084397bb795b34ef6c4ca592a2dfc631: https://docs.google.com/comments/d/AAHRpnXv4xP9q9-X1h7sQ89KXJzektmNFVijRSaGiC-djxeIAJs4EpTJCs485zbbHZpPVc_cnDW9WLP4_g9OaX0ygw-oRMPeJN_Mi0hq5x1vjh87TUkVs_OkTIgdRnRIQ5w0KXReGOX-N/api/js?anon=true&pref=2
embedded by
https://www.google.com/url?sa=p&q=https://docs.google.com/comments/d/AAHRpnXv4xP9q9-X1h7sQ89KXJzektmNFVijRSaGiC-djxeIAJs4EpTJCs485zbbHZpPVc_cnDW9WLP4_g9OaX0ygw-oRMPeJN_Mi0hq5x1vjh87TUkVs_OkTIgdRnRIQ5w0KXReGOX-N/api/js?anon=true&pref=2
uncaught exception: NoScript aborted redirection to https://docs.google.com/comments/d/AAHRpnXv4xP9q9-X1h7sQ89KXJzektmNFVijRSaGiC-djxeIAJs4EpTJCs485zbbHZpPVc_cnDW9WLP4_g9OaX0ygw-oRMPeJN_Mi0hq5x1vjh87TUkVs_OkTIgdRnRIQ5w0KXReGOX-N/api/js?anon=true&pref=2 <unknown>
Content Security Policy: Couldn't parse invalid host 'strict-dynamic' <unknown>
about:blank : Unable to run script because scripts are blocked internally. <unknown>
mutating the [[Prototype]] of an object will cause your code to run very slowly; instead create the object with the correct initial [[Prototype]] value using Object.create ConvergedLogin_PCore.js:19:1106
The site specified an invalid Strict-Transport-Security header.[Learn More] owa
[NoScript] Force text/plain for missing content-type on https://outlook.live.com/owa/
Re: NoScript is blocking my email access
Posted: Wed May 02, 2018 2:49 am
by The-unknown-user
It looks like my previous post contains stuff from other tabs. Don't know how that happened. Hopefully what's below is what you need:
Code: Select all
The site specified an invalid Strict-Transport-Security header.[Learn More] owa
ThreadSources.prototype._fetchSourceMap threw an exception: Error: SyntaxError: JSON.parse: unexpected character at line 1 column 1 of the JSON data
URL:
https://outlook.live.com/owa/auth/aria-webjs-compact-sdk-1.2.0.min.js.map
Content (the first 1024 characters):
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
<!-- Copyright (c) 2011 Microsoft Corporation. All rights reserved. -->
<!-- OwaPage = ASP.auth_errorfe_aspx -->
<html>
<head>
<meta http-equiv="X-UA-Compatible" content="IE=10" />
<meta http-equiv="Content-Type" content="text/html; CHARSET=utf-8">
<title>Error</title>
<style>
@font-face {
font-family: "wf_segoe-ui_normal";
src: url("/owa/auth/15.20.715/themes/resources/segoeui-regular.eot?#iefix") format("embedded-opentype"),
url("/owa/auth/15.20.715/themes/resources/segoeui-regular.ttf") format("truetype");
}
@font-face {
font-family: "wf_segoe-ui_semilight";
src: url("/owa/auth/15.20.715/themes/resources/segoeui-semilight.eot?#iefix") format("embedded-opentype"),
url("/owa/auth/15.20.715/themes/resources/segoeui-semilight.ttf") format("truetype");
}
@fo
[...]
Stack: SourceMapConsumer@resource://gre/modules/devtools/SourceMap.jsm:79:15
ThreadSources.prototype._fetchSourceMap/fetching<@resource://gre/modules/commonjs/toolkit/loader.js -> resource://gre/modules/devtools/server/actors/script.js:5453:19
Handler.prototype.process@resource://gre/modules/Promise.jsm -> resource://gre/modules/Promise-backend.js:867:23
this.PromiseWalker.walkerLoop@resource://gre/modules/Promise.jsm -> resource://gre/modules/Promise-backend.js:746:7
this.PromiseWalker.scheduleWalkerLoop/<@resource://gre/modules/Promise.jsm -> resource://gre/modules/Promise-backend.js:688:37
EventLoop.prototype.enter@resource://gre/modules/commonjs/toolkit/loader.js -> resource://gre/modules/devtools/server/actors/script.js:371:5
ThreadActor.prototype._pushThreadPause@resource://gre/modules/commonjs/toolkit/loader.js -> resource://gre/modules/devtools/server/actors/script.js:580:5
ThreadActor.prototype.onAttach@resource://gre/modules/commonjs/toolkit/loader.js -> resource://gre/modules/devtools/server/actors/script.js:692:7
DSC_onPacket@resource://gre/modules/commonjs/toolkit/loader.js -> resource://gre/modules/devtools/server/main.js:1450:15
LocalDebuggerTransport.prototype.send/<@resource://gre/modules/devtools/dbg-client.jsm -> resource://gre/modules/devtools/transport/transport.js:561:11
makeInfallible/<@resource://gre/modules/commonjs/toolkit/loader.js -> resource://gre/modules/devtools/DevToolsUtils.js:82:14
makeInfallible/<@resource://gre/modules/commonjs/toolkit/loader.js -> resource://gre/modules/devtools/DevToolsUtils.js:82:14
Line: 79, column: 14
Re: NoScript is blocking my email access
Posted: Wed May 02, 2018 2:52 am
by barbaz
This is likely the relevant message -
The-unknown-user wrote:Code: Select all
[NoScript] Force text/plain for missing content-type on https://outlook.live.com/owa/
I have no idea how to add exception for this feature, sorry.
Re: NoScript is blocking my email access
Posted: Wed May 02, 2018 6:03 am
by Giorgio Maone
I've tried (Palemon 27.9.0 + NoScript 5.1.8.5) and it worked smoothly for me.
It smells a lot like an extensions conflict causing /owa HTTP headers to be stripped away, and NoScript's content-type protection to kick in as a consequence.
Could you check whether disabling all the extensions except NoScript helps, and if it does, try
Standard Diagnostic|sd?
Anyway, this feature can be disabled (globally) by setting the
noscript.nosniff about:config preference to false.
Re: NoScript is blocking my email access
Posted: Wed May 02, 2018 11:06 pm
by The-unknown-user
Tried it will all extension disabled except NoScript but it still didn't work. However I did forget to mention that I am getting an error message on the actual email tab. Maybe something there will help? I'll post below. If all else fails, I'll just disable noscript.nosniff as mentioned.
Re: NoScript is blocking my email access
Posted: Wed May 02, 2018 11:07 pm
by The-unknow-user
Code: Select all
cId: F45043F8824A4D16AFF58800F8719D7D
app: Mail
st: 500
reqid: undefined
wsver: undefined
efe: undefined
ebe: undefined
et: ClientError
esrc: BootStrings
err: undefined
Re: NoScript is blocking my email access
Posted: Fri May 04, 2018 12:17 am
by The-unknow-user
Disabling noscript.nosniff doesn't help.
Re: NoScript is blocking my email access
Posted: Fri May 04, 2018 1:45 am
by Giorgio Maone
Stupid question: does actually disabling NoScript help?
Re: NoScript is blocking my email access
Posted: Fri May 04, 2018 2:11 am
by The-unknown-user
Yes, disabling NoScript enables me to view my email.
Re: NoScript is blocking my email access
Posted: Mon May 07, 2018 4:48 pm
by The-unknown-user
So, is there anything else I can do or try?