Page 1 of 1
NoScript and Firstcom
Posted: Mon Feb 14, 2011 8:39 pm
by Editz
Running Firefox 3.6.13 with NoScript 2.0.9.7. Have found it blocks everything from
www.firstcom.com even though the site has been white listed. Not sure what's going on. Disabling NS allows me to access the site normally. Firstcom did go through a major UI update recently, so I'm thinking there's something going on there. Any help would be appreciated.
Re: NoScript and Firstcom
Posted: Mon Feb 14, 2011 11:34 pm
by Giorgio Maone
Code: Select all
[NoScript] Blocking nosniff Javascript served from https://github.com/malsup/blockui/raw/master/jquery.blockUI.js?v2.34 with wrong type info text/plain, inline and included by http://www.firstcom.com/
Looks like they're pulling down some JavaScript libraries from github, which is a public code repository which can be read
and written by anyone.
This is a very dangerous practice, and in fact github tries to mitigate it by sending out the X-Content-Options: nosniff header together with a text/plain content type, which prevents the script from being loaded on browsers which correctly support the nosniff feature (NoScript and IE9, ATM).
If you want to work-around for this script only, you can add
https://github.com/malsup/blockui/raw/m ... blockUI.js? to your
noscript.inclusionTypeChecking.exceptions about:config preference (space separated).
Re: NoScript and Firstcom
Posted: Tue Feb 15, 2011 1:12 am
by Editz
Thanks for the info. I'll pass it along to their webmaster.
Re: NoScript and Firstcom
Posted: Tue Feb 15, 2011 1:41 am
by Editz
Giorgio Maone wrote:Code: Select all
If you want to work-around for this script only, you can add [b]https://github.com/malsup/blockui/raw/master/jquery.blockUI.js?[/b] to your [b]noscript.inclusionTypeChecking.exceptions[/b] [url=http://kb.mozillazine.org/About:config]about:config[/url] preference (space separated).[/quote]
I believe I added the exception properly (vzw.com was already in there), but I saw no change with Firstcom's site after re-starting Firefox. Am I missing something?
[img]http://i55.tinypic.com/sowmit.jpg[/img]
Re: NoScript and Firstcom
Posted: Tue Feb 15, 2011 4:03 am
by therube
Not sure if
all of these sites are needed (in addition to the Preference change), but give it a try:
Music isn't bad, even if the site could be dangerous
.
(View Image, if need be.)
Re: NoScript and Firstcom
Posted: Tue Feb 15, 2011 5:17 pm
by Editz
Yes, I already have NoScript set to accept everything from Firstcom, but the site's not displaying anything other than the blue background page. Same symptom I've had since this all began. Does NS need to be reinstalled after the Firefox preferences change or something?
Re: NoScript and Firstcom
Posted: Tue Feb 15, 2011 9:37 pm
by therube
Are the other domains I show also allowed?
(Or temporarily Allow Globally. If that works, Revoke Temporary & then add back in sites to you get the mix that works.)
Reinstall certainly is not required.
Restart should not be required AFAIK.
Double check the exception entered.
(The '?', or anything following may or may not be needed. Seem to recall that ?* was not needed. Perhaps safer though?)
Re: NoScript and Firstcom
Posted: Wed Feb 16, 2011 1:17 am
by Editz
Took out the ? on the exception and it had no effect. Turned on Allow Global and it had no effect. I even DISABLED NoScript from the Firefox Add-ons list and restarted with NO EFFECT. Really crazy behavior! I can call up Firstcom with my copy of IE 8.0.6 just fine though.
I'll keep fiddling with it and keep you posted.
Re: NoScript and Firstcom
Posted: Wed Feb 16, 2011 1:42 am
by therube
I even DISABLED NoScript from the Firefox Add-ons list and restarted with NO EFFECT.
Then that makes it easy to determine that it
currently is not a NoScript issue
.
Adblock Plus or other "blocking" extension installed? Even a HOSTS file.
Start FF in -safe-mode. If it still does not work, then it is (most likely) external of "Mozilla".
Re: NoScript and Firstcom
Posted: Wed Feb 16, 2011 7:01 pm
by Editz
therube wrote:Start FF in -safe-mode. If it still does not work, then it is (most likely) external of "Mozilla".
Yep, staring in safe mode with everything disabled produced the same result, so it's likely neither Adblock nor NoScript. Sorry for wasting everybody's time, but I swear there was one instance where I got Firstcom to come up properly by disabling NS. I relayed the script info to Firstcom's webmaster though, and they claimed they would be making revisions in the coming weeks.
Re: NoScript and Firstcom
Posted: Fri Feb 18, 2011 7:56 pm
by Editz
Read a little about HOSTS files and tried the suggestion of pulling up the site, going to Work Offline mode, reloading and then going back Online. That seems to have worked and I can access Firstcom normally with FF 3.6.13 and the NS and AdBlock filters enabled.