Page 1 of 1

Userscript link blocked even when whitelisted

Posted: Fri Dec 09, 2011 3:38 pm
by seaweed
Tried with both stable and the development version of NoScript.

http://mayhemydg.github.com/4chan-x/

Reproduce:
-Whitelist github.com, or even allow scripts globally, with the option "Block every object from a site marked as untrusted" enabled.
-Go to website above
-Try to click "INSTALL" link to a .user.js file.

Expected result:
-It works and goes straight to the file, because github is not marked as untrusted

Actual result:
-Link is blocked.

Disabling the "Block every object from a site marked as untrusted" option fixes the issue. "Fix Javascript links" option doesn't help at all.

Re: Userscript link blocked even when whitelisted

Posted: Sat Dec 10, 2011 5:14 pm
by therube
Best I can figure, is that you have to Allow Global & neither Apply these restrictions to whitelisted sites too nor Block every object coming from a site marked as untrusted can be selected.

Don't know why, or why Allow Global needs to be allowed?


(Page fails in FF 3.0, with NoScript removed.)

Re: Userscript link blocked even when whitelisted

Posted: Sat Dec 10, 2011 7:26 pm
by Giorgio Maone
Server misconfiguration (or, better, abuse of a code repository as a CDN):

Code: Select all

[NoScript] Blocking nosniff Javascript served from https://raw.github.com/mayhemydg/4chan-x/master/latest.js with wrong type info text/plain, inline and included by http://mayhemydg.github.com/4chan-x/
Work-around: add "https://raw.github.com/mayhemydg/4chan- ... /latest.js" (without quotes, space separated) to your noscript.inclusionTypeChecking.exceptions about:config preference.