Page 1 of 1

NoScript breaks the Google Dictionary extension in Chrome

Posted: Tue Feb 23, 2021 12:25 am
by Funk
Can I please check if there's something I'm missing or doing wrong? With NoScript on, the Google Dictionary extension breaks; it just says 'Searching...' Even with all scripts whitelisted on the site page temporarily, it still doesn't work - only disabling the NoScript extension fixes it.

Is there a setting somewhere I've missed as I like the Dictionary but don't want to run without NoScript.

Many thanks!

Re: NoScript breaks the Google Dictionary extension in Chrome

Posted: Tue Feb 23, 2021 2:15 am
by barbaz
Funk wrote: Tue Feb 23, 2021 12:25 am the Google Dictionary extension
This one? - https://chrome.google.com/webstore/deta ... obmjgjcoja

I can reproduce the problem with fresh install of Chromium 88.0.4324.182 with that extension + latest NoScript. But I don't need to completely disable NoScript to get it working - enabling "script" capability for DEFAULT preset also works. So solving this is a matter of figuring out which specific site(s) this extension needs scripts allowed, I was unable to find them.

Re: NoScript breaks the Google Dictionary extension in Chrome

Posted: Tue Feb 23, 2021 8:51 pm
by Giorgio Maone
The domain which needs to be manually set to TRUSTED (in NoScript Options>Per site Permissions) is

Code: Select all

content-dictionaryextension-pa.googleapis.com
I had to debug the background page of the extension to find out that it contains an iframe pointing to an entire page on that site which does the heavy lifting. Something (remote pages in a privileged content) which AFAIK is already cause for extensions not by Google not to pass the Chrome Store review, and that will be outright technically impossible in Manifest V3...

Re: NoScript breaks the Google Dictionary extension in Chrome

Posted: Tue Feb 23, 2021 8:59 pm
by barbaz
Giorgio Maone wrote: Tue Feb 23, 2021 8:51 pm The domain which needs to be manually set to TRUSTED (in NoScript Options>Per site Permissions) is

Code: Select all

content-dictionaryextension-pa.googleapis.com
Is that all? I did find that one and tried setting it to TRUSTED, and the Google Dictionary extension still didn't work for me.

Re: NoScript breaks the Google Dictionary extension in Chrome

Posted: Sat Feb 27, 2021 11:43 pm
by Funk
Giorgio Maone wrote: Tue Feb 23, 2021 8:51 pm The domain which needs to be manually set to TRUSTED (in NoScript Options>Per site Permissions) is

Code: Select all

content-dictionaryextension-pa.googleapis.com
I had to debug the background page of the extension to find out that it contains an iframe pointing to an entire page on that site which does the heavy lifting. Something (remote pages in a privileged content) which AFAIK is already cause for extensions not by Google not to pass the Chrome Store review, and that will be outright technically impossible in Manifest V3...
This fixed it, thanks for looking into it and posting the solution.

Re: [RESOLVED] NoScript breaks the Google Dictionary extension in Chrome

Posted: Wed Mar 17, 2021 11:40 pm
by Funk
Strangely this seems to have broken again. Could Google have changed something...?

Re: NoScript breaks the Google Dictionary extension in Chrome

Posted: Thu Mar 18, 2021 2:15 am
by barbaz
Likely yes. Now that extension is not working for me even in a new Chromium profile without NoScript.