InformAction Forums

RE: Latest version of NoScript 1.9.9.14

I entered my GMX webmail and checked NoScript because it had been showing "about:blank" when there. I left a message in the GMX forum as to why "about:blank" was needed and am awaiting a reply for that (it may have something to do with Facebook).

BUT...just now, I went back to GMX webmail, checked the NoScript, AND NOW IT SHOWS "WINDOWS.LIVE" WAS BEING ALLOWED...INSIDE GMX! How is that possible for Hotmail's Window Live script to be inside my GMX webmail and also already being allowed to run?
Of note is that within the NoScript, the box for checking whether or not you wish to keep track of recently blocked sites is NOT checked ( I don't want to see my recently blocked sites.)

This is the order of what happened when I first saw the "Windows Live" script option inside my GMX webmail:
(1) I first went into my GMX webmail...checked the NoScript, nothing was unusual, and I exited.
(2) I went into my Hotmail...exited.
(3) I went back a 2nd time to GMX webmail...checked the NoScript and still nothing was unusual, and I exited again.
(4) I went back a 3rd time to GMX webmail...checked the NoScript and all of a sudden, there appeared the "Windows Live" script, and it was even marked as being allowed! I then exited GMX & re-entered a few more times to see if that was just a fluke or not, but each time, the "Windows Live" script was still there!

This has never ever happened before, so is there a bug in this newest version of NoScript? Can someone please explain how this has happened?
-----------------------------------------------------------------------

UPDATE and further explanation:
I realize this is rather long, but perhaps it will help someone figure out what is happening. Also...note that when this happened to me, I was using Firefox version 1.9.0.14 and now I have upgraded to Firefox 1.9.0.15 since my last posting.

(1) Cleared all cookies.
(2) Went to Hotmail sign-in page and selected "temporarily allow live.com"...did not enter Hotmail...went back to my Home Page...cookies showed "login sign-in". "I left the cookie intact."
(3) Went back to Hotmail sign-in page, signed in, and then I exited...went back to my home page and "deleted cookies".
(4) Went back to Hotmail sign-in page, and page still showed that I was good to go still for entering Hotmail, but I did NOT...I went back to home page and "deleted the cookies".
(5) I then logged into my GMX webmail, and NoScript showed "live.com" (from Hotmail) and it was set to allow!
I disallowed "live.com" and it showed that I had disallowed it...but GMX instantly logged me out of its webmail, informing me that "cookies could not be found"! I had not deleted GMX cookies whatsoever!
(6) I went back to my home page and checked the cookies - which showed cookies still on there (a)one from GMX and (b)one cookie from Hotmail's "login.live.com"! REMEMBER: In #4 above, I had deleted the "live.com" cookie, so this cookie was set because NoScript has the "live.com" script available while in my GMX webmail and is even set to be allowed...and it was a temporary session Hotmail cookie at that! "I left both cookies intact."
(7) I went back to Hotmail's sign-in page and it was still ok to sign in, but I did not.
(8) I went back to my home page and checked the cookies - which showed GMX, live.com,and login.live.com. "I left these cookies intact."
(9) I went to GMX and logged in. REMEMBER: In #5 above, I was able to switch the setting of allowing "Live.com" to NOT allowing it (before GMX logged me out). This time, NoScript showed that "Live.com" was "re-set" to be allowed, again...without me resetting it. Once, again, I switched it back and disallowed "live.com"...and GMX let me do it this time without logging me out of the email system.
(10) Remember: In the very beginning of accessing Hotmail, I had selected NoScript's "temporarily allow live.com", and NOT the "allow"...so the "temporarily allow live.com" should have only been for accessing Hotmail for sessions only and not transfer over to GMX webmail!

Lengthy explanation, but I certainly hope someone will be able to figure out just why - after months & months of never having this problem before, why is Hotmail's "live.com" script being inserted into NoScript when I visit GMX webmail, and especially when it was set for a temporary session cookie with Hotmail?
And remember, also, that I have left "unchecked" the box for remembering the "recently blocked sites".

I hope someone will be able to understand my explanation and be able to inform me what is wrong!

live.com is in the default whitelist.

Though you should still be able to remove it.

Assume you do not have live.com hard coded somewhere like in user.js.

Perhaps some kind of corruption. Might try a Reset, though backup any settings you may want to retain first.

Otherwise, as a test, create a new Profile, install only NoScript & see if it is still occurring.

Thanks for answering.

What I don't understand is why do I need to try different things when I haven't done anything at all except for to download the 2 new versions of NoScript, all within about 6 hours or so (overlapping one day into the next).
I have not added new add-ons, extensions, etc. This only started happening with the newest versions (last 2 days):
NoScript 1.9.9.13 and 1.9.9.14.

"live.com" is not on my whitelist. I deleted the whitelist quite some time ago, but there have since been more created...and there is still nothing listed for "live.com". Everything worked fine when nothing was listed on the whitelist and it has been working fine with "live.com" still not on the whitelist (although I don't know why it hasn't been re-added again).

I feel uneasy about trying to create new profiles and have never done so. Perhaps someday I'll get up enough courage to mess around with that and some other things, but I'm not comfortable yet.

Since I last posted, I can now always (so far) FORBID "live.com" in NoScript while using my GMX webmail...BUT...then when I go to sign in at Hotmail, it has still been forbidden while in GMX and so I must change it back to "allow" (allow or just temporarily allow), and, of course, when I return to GMX, NoScript has re-set "live.com" to be allowed, again!

Does this help clarify anything at all?

If you revert to an earlier NoScript version, http://noscript.net/feed, does the issue subside?