Page 1 of 1

Verizon Wireless with 1.10

Posted: Sun Jul 25, 2010 1:50 pm
by rdmeer
Hi,

I cannot view the login bar at the top of the Verizon Wireless Web site with NoScript enabled. The bar shows if I disable the NoScript add-on. But it does not show even if I allow scripts globally. I'm not sure which setting is affecting the bar.

How can I get the login bar to show with NoScript enabled?


Thanks,
Mike

Re: Verizon Wireless with 1.10

Posted: Sun Jul 25, 2010 2:26 pm
by Alan Baxter
Confirmed with NoScript 2.0rc6, even with Scripts Globally Allowed. NoScript is blocking XSS, but giving no notification. The message in the Error Console is

Code: Select all

[NoScript] Blocking cross site Javascript served from https://scache.vzw.com/globalnav/globalnavmenu.txt with wrong type info text/plain and included by http://www.verizonwireless.com/b2c/index.html
The problem and Error Console message persist even if I disable XSS by unchecking both boxes in NoScript Options > Advanced > XSS

I don't know how to work around this problem without disabling NoScript. Sorry, MIke.

Re: Verizon Wireless with 1.10

Posted: Sun Jul 25, 2010 8:25 pm
by al_9x
rdmeer wrote:How can I get the login bar to show with NoScript enabled?
noscript.inclusionTypeChecking.exceptions=.vzw.com

Re: Verizon Wireless with 1.10

Posted: Mon Jul 26, 2010 2:13 am
by rdmeer
That worked. Thank you al_9x.

For completeness, to make the change:
  • Type "about:config" in the address bar.
  • Press Enter.
  • Click "I'll be careful, I promise!"
  • Paste "noscript.inclusionTypeChecking.exceptions" in the Filter field.
  • Double-click on the key.
  • Paste ".vzw.com" into the prompt.
  • Click OK.
  • Open a new tab.
  • Browse to the Verizon Wireless Web site.
The login bar should show. If not then make sure you pasted the correct value into the exceptions key: ".vzw.com" (dot vzw dot com).

Re: Verizon Wireless with 1.10

Posted: Mon Jul 26, 2010 2:38 am
by Alan Baxter
I've confirmed your fix too, al_9x. Thank you.

Re: Verizon Wireless with 1.10

Posted: Tue Jul 27, 2010 6:49 pm
by therube
Man I hate Verizon :evil:!

(NoScript 2.0)

Appears I can log into a personal account without the noscript.inclusionTypeChecking.exceptions;.vzw.com change.

Though I can't seem to get to a usable area on the business end, only ending up at a "no javascript" (I suppose it is) page, https://ebillpay.verizonwireless.com/vzw/nos/sorry.jsp. Even so, I think I'm logged in. And then I can't seem to log out (without clearing cookies or authenticated sessions)?


(What is an "authenticated sessions"? As in like after clearing it, why wasn't I logged out from here, informaction.com, which I expected to be?)

Re: Verizon Wireless with 1.10

Posted: Tue Jul 27, 2010 7:18 pm
by therube
Man I hate Verizon :evil:!

Appears that SeaMonkey & FF (3.6.7) work differently at Verizon.
FF needing the noscript.inclusionTypeChecking.exceptions change.

(Running NoScript 1.9.9.53 in FF.)

I can successfully log in to VZ business & actually load a page of interest, https://b2b.verizonwireless.com/tbmb/login/perform.do, rather then the stupid "nojs" page.

Yet when I spoofed the UA in SeaMonkey, I still was running into problems?

verizonwireless.com & vzw.com Allowed in each instance.

Looks like includsionTypeChecking is only needed on a page like, http://www.verizonwireless.com/b2c/index.html.
But not here, https://mblogin.verizonwireless.com/ams ... perform.do.

And I can actually log in & get to where I need to go using the latter link in SeaMonkey :roll:.


Man I hate Verizon :evil:!

Re: Verizon Wireless with 1.10

Posted: Wed Jul 28, 2010 7:53 pm
by therube
With 2.0.1rc1, I now need to add .vzw.com as a noscript.inclusionTypeChecking.exceptions & further I can now log in & navigate successfully. Appears I was running into meta redirections being broken sometimes.


And before you get any ideas, Man I <still> hate Verizon :evil:!


*noscript.inclusionTypeChecking.exceptions, I never would have figured that out.

Re: Verizon Wireless with 1.10

Posted: Tue Oct 12, 2010 3:59 pm
by bob
Updating NoScript removes this fix. Bookmark this page and apply the same fix again whenever you update NoScript.

Re: Verizon Wireless with 1.10

Posted: Tue Oct 12, 2010 4:31 pm
by therube
> Updating NoScript removes this fix

It should not have?

Re: Verizon Wireless with 1.10

Posted: Tue Oct 12, 2010 4:42 pm
by Giorgio Maone
therube wrote:> Updating NoScript removes this fix

It should not have?
No it shouldn't. Updates shouldn't touch non-default preference values. Something else seems to be broken in bob's profile.