Page 1 of 1

.JS are fetched from network even if scripts are disabled

Posted: Thu Jun 30, 2011 10:30 am
by Nemoar
Hi,
To save bandwidth on I'm using NoScript, ImgLikeOpera.

After upgrading to Firefox 5.0b7 and NoScript 2.1.1.2 (dont know which version I was using previously) firefox began to fetch .js JavaScript files from the network EVEN if the scripts are disabled in NoScript. (This was not the case previously.)

Upgrading to NoScript 2.1.2rc0 and setting "noscript.allowCachingObjects -> False" at about:config did not help.

Please advise.
Best regards

Re: .JS are fetched from network even if scripts are disable

Posted: Fri Jul 01, 2011 12:08 am
by al_9x
Confirming. This is not a recent regression, it exists in gecko>=2.0 with any NS version. Fx 3.6 is ok. Too bad this wasn't caught earlier, bypassing blocked script fetching is a valuable privacy and perf feature.

test page:

Code: Select all

<script src="script.js"></script>

Re: .JS are fetched from network even if scripts are disable

Posted: Fri Jul 01, 2011 12:25 am
by Giorgio Maone
I suppose it's an artifact of script and CSS prefetching operated by most recent versions of Gecko for performance reasons.
Checking what can be done about it...

Re: .JS are fetched from network even if scripts are disable

Posted: Fri Jul 01, 2011 12:34 am
by al_9x
This appears to be a CAPS regression.

Code: Select all

user_pref("capability.policy.default.javascript.enabled", "noAccess");
The above policy prevents script fetching in Fx 3.6 but not in 4 & 5. I'll file a bug, but in the meantime can you compensate by explicitly blocking them ?

Re: .JS are fetched from network even if scripts are disable

Posted: Fri Jul 01, 2011 12:42 am
by al_9x

Re: .JS are fetched from network even if scripts are disable

Posted: Fri Jul 01, 2011 12:58 am
by Giorgio Maone
Worked around in latest development build, thanks.

Re: .JS are fetched from network even if scripts are disable

Posted: Fri Jul 01, 2011 1:36 am
by al_9x
Giorgio Maone wrote:Worked around in latest development build, thanks.
verified

Re: .JS are fetched from network even if scripts are disable

Posted: Fri Jul 01, 2011 11:24 am
by Nemoar
Verified. And impressed :) with the speed of resolution.
+ Added to the list of software to be supported. ;)

Thanks and Best Regards...

Re: .JS are fetched from network even if scripts are disable

Posted: Wed Aug 03, 2011 7:31 pm
by al_9x
This problem remains for https scripts loaded from http and https pages

Fx 6.0b4, NS 2.1.2.6rc2

load as https:

Code: Select all

<script src="script.js"></script>
load as http:

Code: Select all

<script src="https://ajax.googleapis.com/ajax/libs/jquery/1.6.2/jquery.min.js"></script>
Please include the version in your "latest development build" posts. You started doing it briefly, then stopped.

Re: .JS are fetched from network even if scripts are disable

Posted: Wed Aug 03, 2011 10:06 pm
by Giorgio Maone
Fixed in 2.1.2.6rc3.

Re: .JS are fetched from network even if scripts are disable

Posted: Wed Aug 03, 2011 10:15 pm
by al_9x
Giorgio Maone wrote:Fixed in 2.1.2.6rc3.
verified