Restaurant online menu not working

[Aimhere]

Hi,

I'm having a problem with NoScript and the pizza restaurant Toppers (http://www.toppers.com).

At this site, when you are viewing the restaurant's menu and click on an item, it should display an overlay (within the browser, not a separate window) with the details and options for that item. However, with NoScript enabled, the overlay is blocked, and clicking the items in the menu does nothing.

I've whitelisted toppers.com, as well as amazonaws.com (which is used by Toppers), but that doesn't help. Nor does temporarily allowing other scripts from the page (usually google-analytics.com). The only way I can see the overlay is to disable NoScript and restart Firefox.

I'm using NoScript 2.0.5.1 on Firefox 3.6.12, under Windows 7 Home Premium 64-bit.

The exact URL is https://order.toppers.com/Menu.aspx?T=t ... 0ab7d6359c.
Clicking any item on this menu does nothing.

In the Firefox error console, I get the following under the "Errors" tab when the page is loaded:

Error: onTabSelecting is not defined
Source File: https://order.toppers.com/Menu.aspx?T=t ... 0ab7d6359c
Line: 1426

(I expect the above is caused by the script being blocked)

And on the "Messages" tab:

[NoScript] Blocking cross-site Javascript served from https://s3.amazonaws.com/onosys.com/74/ ... nu.aspx.js with wrong type info binary/octet-stream, attachment; and included by https://order.toppers.com/Menu.aspx?T=t ... 0ab7d6359c

[NoScript] Blocking cross-site Javascript served from https://s3.amazonaws.com/onosys.com/74/ ... nu.aspx.js with wrong type info binary/octet-stream, attachment; and included by https://order.toppers.com/Menu.aspx?T=t ... 0ab7d6359c

I tried going into NS options and unchecking the "Avdanced/XSS" options, but that had no effect upon reloading the page.

Hope this can be resolved.

[Alan Baxter]

It's bug in the site coding.
http://forums.informaction.com/viewtopi ... 243#p23243

You can work around it by appending

Code: Select all

https://s3.amazonaws.com/onosys.com/74/JavaScript/

to the noscript.inclusionTypeChecking.exceptions preference in about:config. Separate it from the previously existing entry with a space.

[AimHere]

That did it, thanks!

[Alan Baxter]

You're welcome.