InformAction Forums

Several games in Facebook (Bejeweled Blitz, Zinga Slingo for example) pop up messages on the screen that need to be dismissed by clicking the X in their top right corner. Because of the way these are constructed, NS detects them as attempted clickjackings. I know that I can add them to noscript.clearClick.exceptions, but I have trouble identifying the URLs to add because the NS dialog truncates the middle out of it. I tried using the built in Firefox tools. It was able to show me the html source for the div, but it was empty (I assume the handler is done via JS). I wound up submitting the "attempt" through NS as # 358184 if that helps track down the URL.

Is that URL logged to my JS error console? If so, what keywords should I look for? Do I need to enable noscript.clearClick.debug first?
Perhaps an enhancement to "Allow now and remember for the future" which would add to noscript.clearClick.exceptions permamently for me.

URLs to these games?

Yes, the report numbers help.

> Is that URL logged to my JS error console

I believe so.

> Do I need to enable noscript.clearClick.debug

No.

therube wrote:URLs to these games?

Zynga Slingo is one of them.
https://apps.facebook.com/playslingo/

therube wrote:Yes, the report numbers help.

367718 has just been reported for that URL.

Actions to repeat invocation

Go to https://apps.facebook.com/playslingo/
Sign up
Go to different URL
Return to https://apps.facebook.com/playslingo/
Click Envelope icon in top right corner of the game box (just above "Shop" and the mute button)

Received ClearClick warning

JS Console shows this

[NoScript ClearClick] Swallowed event mousedown on https://fb.slingo.zynga.com/flash.php?i ... fe0e5d27e5 (rapid fire from https://apps.facebook.com in 400ms)

So should I be adding https://fb.slingo.zynga.com to my whitelist?

You should add

https://apps.facebook.com/playslingo/

(the trusted top-level page)

to your noscript.clearClick.exceptions about:config preference.