InformAction Forums

http://forums.informaction.com/ucp.php? ... 065&type=3

On this url (my start page): http://www.google.com/ig?refresh=1

I consistently get:
----------------------------------------
Warning: Unresponsive script
A script on this page may be busy, or it may have stopped responding. You can stop the script now, or you can continue to see if the script will complete.

Script: chrome://noscript/content/RequestWatchdog.js:991
----------------------------------------

NoScript v. 1.9.9.19 (also w/ latest released version)
Firefox 3.5.5

Any ideas?

Yes,

1. which gadgets have you got?
2. Do you get any NoScript-related message (no generic warning or error) in Tools|Error Console when it happens?

Yes, I'm getting exactly the same problem, with the same website, and only that site. It seems to have started happening only since I started using iGoogle instead of just the normal Google website. The problem seems to be mainly affecting the Gmail gadget. I also get a cross-site scripting error message at the top of the page, for the website. I've had a look at the console messages but can't spot anything that indicates what the problem actually is.

Here's an example of some of the messages:

Warning: Unknown property 'text-overflow'. Declaration dropped.
Source File: http://talkgadget.google.com/talkgadget ... 1smnqs6s9h
Line: 1

Error: Permission denied for <http://talkgadget.google.com> to call method Location.toString on <http://www.google.co.uk>.

Main gadgets I'm using: Google Reader, Gmail, YouTube...
Warning: Unknown property 'zoom'. Declaration dropped.
Source File: http://www.google.co.uk/ig/skin_xml_to_ ... gl=uk&v2=1
Line: 1

grahamt wrote:I also get a cross-site scripting error message at the top of the page, for the website. I've had a look at the console messages but can't spot anything that indicates what the problem actually is.

Could you please look for entries starting with [NoScript...]?
Thanks.

How do I access the NoScript Console to look for these messages? I can't spot any way of accessing it other than by waiting for a problem to occur and for the cross-scripting message bar to pop up! It doesn't appear to be accessible from the NoScript logo on the status bar. or from the Tools > Addons menu.

OK, ignore that. I've just discovered you use the Firefox console log, not your own. I've done a visual search and can't find any messages with a NoScript tag. I'm not sure how you search the log otherwise I would have done it that way.

OK, now this is odd, and I don't know if it's related. I have been having problems with certain website pages not fully loading. I tried accessing the NoScript website itself and although the surrounding frame of the home page loaded, none of the central text would load. I tried accessing the website using Google Chrome and IE7 and neither had any trouble loading the webpage. I also had problems with certain Dooyoo UK pages.

I then disabled NoScript and reloaded Firefox and everything started working properly. I then re-enabled NoScript and reloaded Firefox again and everything seemed to be back to normal!

OK, Got another instance and this time I've discovered NoScript items in Messages but not in Errors or Warnings:

[NoScript DOS] Aborted potential DOS attempt: {GET http://1nltui3li1cdki8kde21baj1igs7ekjc ... s_social=1 <<< http://www.google.co.uk/ig?hl=en&refresh=1, http://www.google.co.uk/ig?hl=en&refresh=1}
(function () {return this.filterXSS(abeReq);})

[NoScript XSS] Sanitised suspicious request. Original URL [http://1nltui3li1cdki8kde21baj1igs7ekjc ... s_social=1] requested from [http://www.google.co.uk/ig?hl=en&refresh=1]. Sanitised URL: [http://1nltui3li1cdki8kde21baj1igs7ekjc ... 6416405869].)

[NoScript DOS] Aborted potential DOS attempt: {GET http://1nltui3li1cdki8kde21baj1igs7ekjc ... s_social=1 <<< http://www.google.co.uk/ig?hl=en&refresh=1, http://www.google.co.uk/ig?hl=en&refresh=1}
(function () {return this.filterXSS(abeReq);})

Security Error: Content at http://pagead2.googlesyndication.com/ may not load data from http://noscript.net/. (Several of these)

Are you using a very slow system? How much time does the browser stall before you get the "Unresponsive script" message?
I ask because the URL in your messages load almost instantaneously with my 2.4 GHz Intel CPU.
Ayway, you can work-around by adding the following line in NoScript Options|Advanced|XSS exceptions:

I have added the recommended additional line. Is the leading "@" symbol correct? None of the other entries here have it. I'll see if it makes any difference.

I am using a three-year old Acer TravelMate with an Intel Core Duo T2500 2.0GHz processor so, no, I wouldn't say it's a slow system although clearly it isn't in the first flush of youth!

Well, the suggested addition to the XSS ruleset has made no difference at all!

grahamt wrote:Well, the suggested addition to the XSS ruleset has made no difference at all!

Do you mean you still get the same XSS warnings? It's very unlikely...

Sorry, but it's a fact. No difference at all. Did you see my question about the format of the line you recommended I add? You didn't comment!

Latest messages:

[NoScript DOS] Aborted potential DOS attempt: {GET http://1nltui3li1cdki8kde21baj1igs7ekjc ... s_social=1 <<< http://www.google.co.uk/, http://www.google.co.uk/}
(function () {return this.filterXSS(abeReq);})

Security Error: Content at http://pagead2.googlesyndication.com/ may not load data from http://noscript.net/.

grahamt wrote:Sorry, but it's a fact. No difference at all.

The warning is different, in fact.

grahamt wrote:Did you see my question about the format of the line you recommended I add? You didn't comment!

The leading '@' is intentional, meaning "requests originating from URLs matching the following expression".

Seen your latest warnings, please try to change it into:

I've tried your revised rule and now Firefox has been updated to 3.5.6 but still no change. The two messages that I seem consistently to be getting are:

[NoScript XSS] Sanitized suspicious request. Original URL [http://1nltui3li1cdki8kde21baj1igs7ekjc ... s_social=1] requested from [http://www.google.co.uk/ig?hl=en&source=mpes&refresh=1]. Sanitized URL: [http://1nltui3li1cdki8kde21baj1igs7ekjc ... 4692255445].

[NoScript DOS] Aborted potential DOS attempt: {GET http://1nltui3li1cdki8kde21baj1igs7ekjc ... s_social=1 <<< http://www.google.co.uk/ig?hl=en&source=mpes&refresh=1, http://www.google.co.uk/ig?hl=en&source=mpes&refresh=1}
(function () {return this.filterXSS(abeReq);})