InformAction Forums

NoScripters and WebSec nerds of all lands, unite!
https://forums.informaction.com/

Fx2: iframe not blocked on first navigation after restart

https://forums.informaction.com/viewtopic.php?t=3358

Page 1 of 1

Fx2: iframe not blocked on first navigation after restart

Posted: Mon Dec 14, 2009 6:05 pm
by al_9x
1) start with a new Fx2 profile + NS 1.9.9.21 (default settings)
2) set "when firefox starts" to show "my widows and tabs from last time" (Options->Main)
3) block iframes
4) go to http://thepiratebay.org/user/nikonoel/
5) nothing is allowed, you should see a blocked ad iframe from ad.adperium.com, if not, reload a few times, eventually it will appear
6) restart firefox (it will reload http://thepiratebay.org/user/nikonoel/ on startup), several times, if necessary, until the ad iframe shows, it will not be blocked

this only seems to happen on a first navigation after startup, subsequent reloads block the iframe

Re: Fx2: iframe not blocked on first navigation after restart

Posted: Mon Dec 14, 2009 10:18 pm
by Giorgio Maone
Any chance the iframe is cached?
On startup, session restore rebuild the page from the cache bypassing most checks (since it doesn't hit the network).

Re: Fx2: iframe not blocked on first navigation after restart

Posted: Tue Dec 15, 2009 12:15 am
by al_9x
Giorgio Maone wrote:Any chance the iframe is cached?
On startup, session restore rebuild the page from the cache bypassing most checks (since it doesn't hit the network).
I have excluded both session restore and cache, by setting the home page to blank, clearing cache after opening and manually navigating. And the iframe is still not blocked on the first loading of the page (if the page has the iframe)

Are you not able to repro?

Re: Fx2: iframe not blocked on first navigation after restart

Posted: Tue Dec 15, 2009 12:53 am
by Giorgio Maone
al_9x wrote:Are you not able to repro?
No I don't. Can you reproduce on Fx 3 and above too?

Re: Fx2: iframe not blocked on first navigation after restart

Posted: Tue Dec 15, 2009 1:06 am
by al_9x
Also, are you saying that if it were session restore, it would be normal/expected? Generally, session restore does not bypass NS, nor should it, I would think.

Re: Fx2: iframe not blocked on first navigation after restart

Posted: Tue Dec 15, 2009 1:18 am
by al_9x
Giorgio Maone wrote:
al_9x wrote:Are you not able to repro?
No I don't. Can you reproduce on Fx 3 and above too?
Not on 3.5.5.

The quickest way to repro is to set the homepage to the page in question and keep restarting until the page has at least one adperium iframe.

You get the placeholder on the first homepage loading?

Would a console dump help? How can I copy the whole thing, rather than individual entries?

Re: Fx2: iframe not blocked on first navigation after restart

Posted: Tue Dec 15, 2009 4:37 am
by Alan Baxter
al_9x wrote:Would a console dump help? How can I copy the whole thing, rather than individual entries?
Use the Console² :: Add-ons for Firefox extension.

Re: Fx2: iframe not blocked on first navigation after restart

Posted: Tue Dec 15, 2009 4:51 am
by al_9x
Here is another possibly related Fx2 iframe bug

1) start with a new Fx2 profile + NS 1.9.9.22 (default settings)
2) forbid IFRAME on trusted
3) go to http://buzz.blogger.com/
4) allow blogger.com then after a reload gmodules.com, reload
5) the "Followers" iframe is not blocked
Image

With Fx 3.5.5, the iframe is blocked but the placeholder sometimes (reload the page) has the wrong size, so perhaps something is a little off there too.
normal: Image wrong size: Image

Re: Fx2: iframe not blocked on first navigation after restart

Posted: Tue Dec 15, 2009 5:14 am
by al_9x
Alan Baxter wrote:
al_9x wrote:Would a console dump help? How can I copy the whole thing, rather than individual entries?
Use the Console² :: Add-ons for Firefox extension.
Thanks. Here is the full log for the load when the ad iframe is there but not blocked, the iframe is from ad.adperium.com

Code: Select all

[NoScript] Content processing -- type: 6, location: http://thepiratebay.org/user/nikonoel/, origin: chrome://browser/content/browser.xul, ctx: [object XULElement], mime: , null
 ----------
[NoScript] Error()@:0
(6,[object XPCWrappedNative_NoHelper],[object XPCWrappedNative_NoHelper],[object XULElement],"",null)@chrome://noscript/content/Policy.js:158
loadURI("http://thepiratebay.org/user/nikonoel/",8192,null,null,null)@:0
loadURI("http://thepiratebay.org/user/nikonoel/",null,null,true)@chrome://browser/content/browser.js:1714
openUILinkIn("http://thepiratebay.org/user/nikonoel/","current",true,null)@chrome://browser/content/utilityOverlay.js:158
openUILink("http://thepiratebay.org/user/nikonoel/",[object MouseEvent],false,false,true,null)@chrome://browser/content/utilityOverlay.js:60
BrowserLoadURL([object MouseEvent],null)@chrome://browser/content/browser.js:1729
handleURLBarCommand([object MouseEvent])@chrome://browser/content/browser.js:1994
apply([object ChromeWindow],[object Object])@:0
()@chrome://noscript/content/noscriptBM.js:47
([object MouseEvent])@chrome://noscript/content/noscriptBM.js:62
onclick([object MouseEvent])@chrome://browser/content/browser.xul:1
@:0

 ----------
[NoScript] Document OK: @http://thepiratebay.org/user/nikonoel/ --- PGFM: null
 ----------
[NoScript] http-on-modify-request: http://thepiratebay.org/user/nikonoel/, 2686976
 ----------
[NoScript] DocShell JS Switch: http://thepiratebay.org/user/nikonoel/ - true/true/?
 ----------
[NoScript] http-on-examine-response: http://thepiratebay.org/user/nikonoel/, 2686976
 ----------
[NoScript] OCS: http://thepiratebay.org/user/nikonoel/, text/html
 ----------
[NoScript] Location Change - req.URI: http://thepiratebay.org/user/nikonoel/, window.location: http://thepiratebay.org/user/nikonoel/, location: http://thepiratebay.org/user/nikonoel/
 ----------
[NoScript] Content processing -- type: 7, location: http://thepiratebay.org/user/nikonoel/, origin: http://thepiratebay.org/user/nikonoel/, ctx: [object XPCNativeWrapper [object Window]], mime: text/html, 4
 ----------
[NoScript] Error()@:0
(7,[object XPCWrappedNative_NoHelper],[object XPCWrappedNative_NoHelper],[object XPCNativeWrapper],"text/html",4)@chrome://noscript/content/Policy.js:158
([object XPCWrappedNative_NoHelper],[object XPCNativeWrapper],[object XPCWrappedNative_NoHelper])@chrome://noscript/content/Main.js:3909
([object XPCWrappedNative_NoHelper],[object XPCWrappedNative_NoHelper],[object XPCWrappedNative_NoHelper])@chrome://noscript/content/Main.js:3676
@:0

 ----------
[NoScript] Document OK: text/html@http://thepiratebay.org/user/nikonoel/ --- PGFM: null
 ----------
[NoScript] http-on-modify-request: http://static.thepiratebay.org/css/pirate2.css, 0
 ----------
Warning: Error in parsing value for property 'display'.  Declaration dropped.
Source file: http://static.thepiratebay.org/css/pirate2.css
Line: 68
 ----------
Warning: Error in parsing value for property 'white-space'.  Declaration dropped.
Source file: http://static.thepiratebay.org/css/pirate2.css
Line: 125
 ----------
Warning: Error in parsing value for property 'white-space'.  Declaration dropped.
Source file: http://static.thepiratebay.org/css/pirate2.css
Line: 126
 ----------
Warning: Error in parsing value for property 'white-space'.  Declaration dropped.
Source file: http://static.thepiratebay.org/css/pirate2.css
Line: 127
 ----------
Warning: Unknown property 'word-wrap'.  Declaration dropped.
Source file: http://static.thepiratebay.org/css/pirate2.css
Line: 128
 ----------
[NoScript] http-on-modify-request: http://clicktorrent.info/phpAdsNew/adview.php?what=zone:226&n=a8146790, 0
 ----------
[NoScript] http-on-modify-request: http://static.thepiratebay.org/img/tpblogo_sm_ny.gif, 0
 ----------
[NoScript] http-on-modify-request: http://static.thepiratebay.org/img/rss_small.gif, 0
 ----------
[NoScript] http-on-modify-request: http://static.thepiratebay.org/img/dl.gif, 0
 ----------
[NoScript] http-on-modify-request: http://static.thepiratebay.org/img/icon-magnet.gif, 0
 ----------
[NoScript] http-on-modify-request: http://static.thepiratebay.org/img/icon_comment.gif, 0
 ----------
[NoScript] http-on-modify-request: http://static.thepiratebay.org/img/11x11p.png, 0
 ----------
[NoScript] http-on-modify-request: http://clicktorrent.info/phpAdsNew/adview.php?what=zone:228&n=af7ca840, 0
 ----------
[NoScript] Content processing -- type: 7, location: http://ad.adperium.com/st?ad_type=iframe&ad_size=120x600&section=728614, origin: http://thepiratebay.org/user/nikonoel/, ctx: <HTML Element>, mime: , null
 ----------
[NoScript] Error()@:0
(7,[object XPCWrappedNative_NoHelper],[object XPCWrappedNative_NoHelper],[object XPCNativeWrapper],"",null)@chrome://noscript/content/Policy.js:158
@:0

 ----------
[NoScript] Guessed MIME '' for location http://ad.adperium.com/st?ad_type=iframe&ad_size=120x600&section=728614
 ----------
[NoScript] Document OK: @http://ad.adperium.com/st?ad_type=iframe&ad_size=120x600&section=728614 --- PGFM: null
 ----------
[NoScript] http-on-modify-request: http://ad.adperium.com/st?ad_type=iframe&ad_size=120x600&section=728614, 2162688
 ----------
[NoScript] DocShell JS Switch: http://ad.adperium.com/st?ad_type=iframe&ad_size=120x600&section=728614 - true/true/?
 ----------
[NoScript] http-on-modify-request: http://clicktorrent.info/phpAdsNew/adview.php?what=zone:227&n=a7881147, 0
 ----------
[NoScript] http-on-modify-request: http://static.thepiratebay.org/img/firefox-22.png, 0
 ----------
[NoScript] http-on-modify-request: http://static.thepiratebay.org/img/miro-22.png, 0
 ----------
[NoScript] http-on-examine-response: http://ad.adperium.com/st?ad_type=iframe&ad_size=120x600&section=728614, 2162688
 ----------
[NoScript] OCS: http://ad.adperium.com/st?ad_type=iframe&ad_size=120x600&section=728614, application/x-unknown-content-type
 ----------
[NoScript] Content processing -- type: 7, location: http://ad.adperium.com/st?ad_type=iframe&ad_size=120x600&section=728614, origin: http://ad.adperium.com/st?ad_type=iframe&ad_size=120x600&section=728614, ctx: <HTML Element>, mime: application/x-unknown-content-type, 2
 ----------
[NoScript] Error()@:0
(7,[object XPCWrappedNative_NoHelper],[object XPCWrappedNative_NoHelper],[object XPCNativeWrapper],"application/x-unknown-content-type",2)@chrome://noscript/content/Policy.js:158
([object XPCWrappedNative_NoHelper],[object XPCNativeWrapper],[object XPCWrappedNative_NoHelper])@chrome://noscript/content/Main.js:3909
([object XPCWrappedNative_NoHelper])@chrome://noscript/content/Main.js:3819
([object XPCWrappedNative_NoHelper],"http-on-examine-response",null)@chrome://noscript/content/RequestWatchdog.js:86
@:0

 ----------
[NoScript] Document OK: application/x-unknown-content-type@http://ad.adperium.com/st?ad_type=iframe&ad_size=120x600&section=728614 --- PGFM: null
 ----------
[NoScript] http-on-modify-request: http://ad.adperium.com/imp?Z=120x600&s=728614&t=2, 0
 ----------
[NoScript] http-on-modify-request: http://content.yieldmanager.com/ak/q.gif, 0
 ----------
[NoScript] http-on-examine-response: http://clicktorrent.info/phpAdsNew/adview.php?what=zone:226&n=a8146790, 0
 ----------
[NoScript] http-on-examine-response: http://clicktorrent.info/phpAdsNew/adview.php?what=zone:228&n=af7ca840, 0
 ----------
[NoScript] http-on-examine-response: http://ad.adperium.com/imp?Z=120x600&s=728614&t=2, 0
 ----------
[NoScript] http-on-modify-request: http://ad.yieldmanager.com/imp?Z=120x600&s=728614&t=2, 262144
 ----------
[NoScript] http-on-examine-response: http://content.yieldmanager.com/ak/q.gif, 0
 ----------
[NoScript] http-on-modify-request: http://ak1.abmr.net/is/content.yieldmanager.com?U=/ak/q.gif&V=3-n+7wRW25A8XunKpvnDUdP64MIwZEmTwxmsIaJMMnEJDCg+XEKVnZZdIelUYWEoOHccgnT54ZYhI%3d&I=3605DA23AB68D92&D=content.yieldmanager.com&01AD=1&, 262144
 ----------
[NoScript] http-on-examine-response: http://clicktorrent.info/phpAdsNew/adview.php?what=zone:227&n=a7881147, 0
 ----------
[NoScript] http-on-examine-response: http://ak1.abmr.net/is/content.yieldmanager.com?U=/ak/q.gif&V=3-n+7wRW25A8XunKpvnDUdP64MIwZEmTwxmsIaJMMnEJDCg+XEKVnZZdIelUYWEoOHccgnT54ZYhI%3d&I=3605DA23AB68D92&D=content.yieldmanager.com&01AD=1&, 262144
 ----------
[NoScript] http-on-modify-request: http://content.yieldmanager.com/ak/q.gif?01AD=2-2-6F787F1F6B58F141C954AC0ABAAD1031C6E2B06C3D371878BC302372BCF48F74-015AE54144AFCB77D2BAF076C8603A48402B6A3447DCE944159BCA340296CB27&01RI=3605DA23AB68D92&01NA=na, 262144
 ----------
[NoScript] http-on-examine-response: http://content.yieldmanager.com/ak/q.gif?01AD=2-2-6F787F1F6B58F141C954AC0ABAAD1031C6E2B06C3D371878BC302372BCF48F74-015AE54144AFCB77D2BAF076C8603A48402B6A3447DCE944159BCA340296CB27&01RI=3605DA23AB68D92&01NA=na, 262144
 ----------
[NoScript] http-on-examine-response: http://ad.yieldmanager.com/imp?Z=120x600&s=728614&t=2, 262144
 ----------
[NoScript] http-on-modify-request: http://content.yieldmanager.edgesuite.net/atoms/9b/9c/7d/6f/9b9c7d6f90dac83183bd7001c63a8c61.jpg, 262144
 ----------
[NoScript] http-on-examine-response: http://content.yieldmanager.edgesuite.net/atoms/9b/9c/7d/6f/9b9c7d6f90dac83183bd7001c63a8c61.jpg, 262144
 ----------
[NoScript] http-on-modify-request: http://thepiratebay.org/favicon.ico, 5120

Re: Fx2: iframe not blocked on first navigation after restart

Posted: Thu Feb 11, 2010 10:12 pm
by Giorgio Maone
al_9x wrote:With Fx 3.5.5, the iframe is blocked but the placeholder sometimes (reload the page) has the wrong size, so perhaps something is a little off there too.
Not a bug. The iframe may or may not be invisible because it's initially set to "visibility: hidden" in CSS and then made visible by a script, which may or may not run correctly depending on the timing of the placeholder replacement.
For objects which are not visible at the time of replacement, NoScript shows a reduced 32x32 placeholder.
On Firefox 3.7 this sequence seems more deterministic and the placeholder is always reduced.
All times are UTC
Page 1 of 1

Powered by phpBB® Forum Software © phpBB Limited