ZeroUnderscoreOu wrote: ↑Mon Mar 14, 2022 10:46 pm
Sent it in DM (I hope you don't mind, I'd rather not post it publicly).
Thank you, that's been very helpful.
This was a combination of unusual settings and a shortcoming of capability need reporting which went unnoticed so far and I've just fixed in
latest development build:
v 11.4rc3
============================================================
x Include ServiceWorker-initiated fetch requests in UI
reporting (thanks 0_o for report)
x Remove redundant style patching
Fetch requests initiated by service workers (such as those used by Spotify to cache album covers locally) were not reported in the UI: it's something quite tricky, because service workers have no associated tab, hence NoScript would need to keep track of all the tab containing documents which may be using the service worker and report back to all of them.
Therefore you could not notice that scdn.com (set to DEFAULT because you use the full address UI listing and surgically enabled only
https://open.scdn.co) was the destination of fetch requests to retrieve images, which were blocked because you unchecked the "fetch" capability from the DEFAULT preset.
In other words, this would have not happened if you kept one of those two default settings you changed: either the "fetch" capability enabled in the DEFAULT preset (which would have made the image requests work transparently) or the domain-scoped UI listing (which would have made you
set the whole ...scdn.com to TRUSTED and enable fetch that way).
The good news is that I've fixed the reporting issue in 11.4rc3, therefore when the serviceWorker first attempts to load the covers (but not later, because then they're permanently cached) you should see a "...scdn.com" line in the popup, set to the DEFAULT preset. Then if you switch to the CUSTOM preset you should see that the "fetch" capability is required, and you can even surgically enable just that capability and only when it is in the context of spotify.com. Or otherwise do like most users: set ...scdn.com to TRUSTED and forget about it
