Page 1 of 1

[INVALID] Noscript doesn't show all relevant domains

Posted: Wed Dec 21, 2011 8:41 pm
by tlu
On www.stage-entertainment.de/musicals/tar ... eshop.html I tried to order online tickets but didn't succeed: That same site was loaded again and again although I had whitelisted stage-entertainment.de in Noscript 2.2.5rc1 using FF 9.0. (etracker.com is in my blacklist).

Out of curiosity I started Chromium in which I had installed the ScriptNo extension. When I clicked the ScriptNo button I was surprised: There wasn't only the stage-entertainment.de domain (and etrackers.com) but also www.ticketonline.de. After whitelisting that one, too, I was referred to another site where I could chose the day and so forth for my online order. The funny thing is: ticketonline.de doesn't even show up in the Noscript menu so I wasn't able to whitelist that domain! Even after trying to generally allow scripting in Noscript, I wasn't referred to the order site. A bug?

The error console shows several errors:

Image

Re: Noscript doesn't show all relevant domains

Posted: Wed Dec 21, 2011 8:45 pm
by Giorgio Maone
www.ticketonline.de is in the list for me.
Did you try on a clean profile with just NoScript installed?

Re: Noscript doesn't show all relevant domains

Posted: Wed Dec 21, 2011 9:48 pm
by therube
(If you have <I/FRAME> blocked, then ticketonline.de only shows under the Blocked Objects menu. If you were to allow from there, or had you clicked the FRAME & allowed, it would then show "normally" as an available domain.)

Re: Noscript doesn't show all relevant domains

Posted: Thu Dec 22, 2011 12:49 am
by Tom T.
therube wrote:(If you have <I/FRAME> blocked, then ticketonline.de only shows under the Blocked Objects menu. If you were to allow from there, or had you clicked the FRAME & allowed, it would then show "normally" as an available domain.)
Which means that ScriptNo either doesn't have the capability of blocking IFRAME, or allows it by default. IFRAME is one common vector of malware, since many "good" sites sell ad space (frames) on their pages, and don't/can't vet the content of all third party ads. Thus turning a good site into a malicious one.

Of course, if the IFRAME is served with third-party scripting, NoScript blocks the script by default. If it has Flash, Java, WebGL, etc., it depends on whether you've blocked them on Embeddings page. Can Scriptno do this?

Re: Noscript doesn't show all relevant domains

Posted: Thu Dec 22, 2011 12:30 pm
by tlu
I tried a new profile and found that ticketonline.de now shows up in the Noscript menu. So I guess another addon is the culprit. Sorry for the confusion. :oops:

BTW: I cannot confirm that ticketonline.de only shows up under the Blocked Objects menu if i/frames are blocked. Here it shows up in the "normal" menu regardless if i/frames are blocked or not (tested with a clean profile).

Re: Noscript doesn't show all relevant domains

Posted: Thu Dec 22, 2011 12:42 pm
by tlu
I found the culprit: ticketonline.de was blocked by Fanboy's Tracking/Stats Blocking list in AdblockPlus. I should have noticed that earlier. I'm afraid I'm getting senile :oops:

Re: Noscript doesn't show all relevant domains

Posted: Fri Dec 23, 2011 2:24 am
by Tom T.
tlu wrote:I found the culprit: ticketonline.de was blocked by Fanboy's Tracking/Stats Blocking list in AdblockPlus. I should have noticed that earlier. I'm afraid I'm getting senile :oops:
Join the crowd. :cry:

OTOH, *none* of us are getting any younger. :lol: