forestmountain wrote:Both aarhus.dk and job.ofir.dk are allowed to no avail. Even if I select "Allow Scripts Globally" the links doesn't appear. Still if I click the link "Akademiker/konsulent (4)" I get a page with no job links.
Did you point to "Blocked Objects", and allow one? The list starts either with <IFRAME>, *@http, or unknown@htttp --- then job.ofir.dk.
Also, I see a placeholder (red S over a blue snake), which if clicked, gives this confirmation prompt:
Code: Select all
Temporarily allow http://job.ofir.dk/templates/liste_B4F52B39-32FB-48F9-976E-2AEEC4D7476A.asp?aakdom=http://www.aarhus
.dk (application/x-unknown <IFRAME> / http://www.aarhus.dk)
Allowing, or temporarily allowing, this will also make good the links to job.ofir, and all of the links to jobs will work properly.
forestmountain wrote:Only if I totally disable the add-on I have access. Maybe it's a XSS issue?
You would see a XSS warning in the NoScript menu or a notification bar, depending on your choice in NS Options > Notifications > XSS.
Also, the Error Console would give an XSS message, as per the
XSS FAQ.
So there is no XSS issue here. Please try allowing the Blocked Object by one or more of the above methods.
*********************************************
By the way, it also works if you uncheck NS Options > Embeddings > "Apply these restrictions to whitelisted sites too".
Or if you leave all checked except "Forbid <IFRAME>", then it works even with *no* scripting allowed.
But both of these permissions apply globally, to all whitelisted sites in the first case, and to *all* sites in the second case. It is much safer to keep this whole Embeddings page checked, and to allow only these sites that you have decided to trust.
.