Page 1 of 1

[INVALID] Ns2.1.3rc2+Fx3.6.22: STS fails browserscope.org

Posted: Fri Sep 23, 2011 10:53 am
by milithruldur
Any reason why it is failing now? It used to work in past versions of NoScript but lost track of when it started failing. For reference, noscript.STS.enabled is set to true.

Let me know what troubleshooting I can provide to help diagnose this problem.

/m

Re: Ns2.1.3rc2 + Fx3.6.22: STS failing in browserscope.org

Posted: Fri Sep 23, 2011 4:28 pm
by therube
What tests are you running?
Where does it fail?
If you disable NoScript, it completes?
If you disable all other extensions except for NoScript, it still fails?

http://www.browserscope.org/

Re: Ns2.1.3rc2 + Fx3.6.22: STS failing in browserscope.org

Posted: Fri Sep 23, 2011 4:47 pm
by milithruldur
Was running the "Security tests" from http://www.browserscope.org. I tried running with NoScript as the only add-on enabled and still it failed under the "Strict Transport Security" test. This used to be passed in some previous NoScript versions.

Running vanilla Firefox 3.6.22 doesn't help either, as STS is not native to this version, so having NoScript provide this function is a great plus in security.

/m

Re: [INVALID] Ns2.1.3rc2+Fx3.6.22: STS fails browserscope.or

Posted: Fri Sep 23, 2011 8:44 pm
by Giorgio Maone
The test is broken: try with Chrome itself ;)

Re: [INVALID] Ns2.1.3rc2+Fx3.6.22: STS fails browserscope.or

Posted: Sat Sep 24, 2011 4:28 am
by milithruldur
Indeed, it's broken. :)