Page 1 of 1

noscript (even disabled) doesnt allow some links to work.

Posted: Sun Aug 22, 2010 3:04 pm
by rge2
With noscript installed, for example, go to verizon wireless page: http://www.verizonwireless.com/b2c/index.html ..Now click on any of topics at top, none of them work. The only way I could get the links to work was to completely uninstall noscript, whitelisting or allowing scripts globally or even disabling noscript all failed to fix the problem.

Over just past few weeks, I have had several such issues where clicking on links do nothing, has caused issues with buying things (verified by visa does not work properly even with scripts globally allowed, though it used to with just whitelisting), so whitelisting will no longer solve the issue. I assume this is some type of xss/iframe security feature???

Any insight into cause or fix. I may figure this out on my own, but this has got to be annoying more than just me....

Re: noscript (even disabled) doesnt allow some links to work

Posted: Sun Aug 22, 2010 3:13 pm
by rge2
couldnt edit first post, actually disabling it did allow it to work (though I am using 3.6.8 instead of beta version), but whitelisting and global scripts dont allow it to work....so must be xss. If someone knows what it is please let me know, probably take me a while in xss options to figure out what is screwing all the verified by visa/etc links up.

Re: noscript (even disabled) doesnt allow some links to work

Posted: Sun Aug 22, 2010 3:41 pm
by rge2
allowing scripts globally + unchecking "block every object coming from a sight marked as untrusted" under embedded settings gets the verizon links to work properly. However, with everything whitelisted on verizon page, still wont work even with unchecking that box.

Guess I will permanently leave that box unchecked, security is nice but shouldnt we worse than the diseases. But that solves only half the problem, need to figure out how to whitelist that which I cant see, ie global scripts works with that box unchecked, but with everything whitelisted and nothing visibly blocked it still doesnt....any help?

Re: noscript (even disabled) doesnt allow some links to work

Posted: Sun Aug 22, 2010 4:20 pm
by therube
Search found 5 matches: verizonwireless

@Giorgio ?

Also:

Code: Select all

[NoScript] Blocking cross site Javascript served from https://scache.vzw.com/globalnav/gnversion.txt?1282493 with wrong type info text/plain and included by http://www.verizonwireless.com/b2c/index.html
 ----------
[NoScript] Blocking cross site Javascript served from https://scache.vzw.com/globalnav/globalnavmenu.txt with wrong type info text/plain and included by http://www.verizonwireless.com/b2c/index.html

Re: noscript (even disabled) doesnt allow some links to work

Posted: Sat Sep 25, 2010 10:32 pm
by Giorgio Maone
This should be fixed on the server side, but you can work around by adding https://scache.vzw.com/ to your noscript.inclusionTypeChecking.exceptions about:config preference.