Page 1 of 1

NoScript WebGL blocking breaks whitelisted sites?

Posted: Fri Apr 06, 2012 7:53 pm
by aloishammer
If WebGL is blocked for untrusted sites, it tends not to work for whitelisted sites.

Great examples:

1) Google Maps "Try WebGL": I get a "Testing..." legend followed by two NoScript placeholders. Maps eventually says my browser doesn't support WebGL. If I can click the placeholders fast enough (they're moving) and tell NoScript to "temporarily allow", eventually I can force WebGL to work in Maps. I have to do this after every browser restart. I *think* I'm allowing every *google*\.com dependency. I do access the site (all Google sites) over HTTPS.

2) http://www.nihilogic.dk/labs/worlds_of_webgl/ , no external dependencies whatever and no HTTPS. If I temporarily allow the site, I get a NoScript placeholder and the WebGL testing logic dies forever:

Code: Select all

Trying to get WebGL context
Trying experimental-webgl?
Trying moz-webgl?
Trying webkit-3d?
Got webkit-3d context
[dies]
The placeholder asks:

Code: Select all

Temporarily allow http://www.nihilogic.dk
(WebGL <CANVAS> / http://www.nihilogic.dk)
3) http://webglstats.com/ -- never works if WebGL blacklisting is on, no placeholders. Just tells me my browser doesn't support WebGL. (It does, clearly, or the Khronos demo would never run.)

What works: tell NoScript to not forbid WebGL for untrusted sites. No more placeholders, and trusted (temporarily or otherwise) sites Just Work. There's nothing logged by NoScript in the Error Console when WebGL blacklisting is on or off. If I disable NoScript WebGL blacklisting, 1), 2), and 3) all work, whether temporarily allowed or otherwise.

I've had this problem for a while (since at least Firefox (Aurora) 10), but haven't gotten around to reporting it before now. Presently using Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20120406 Firefox/13.0a2.

Re: NoScript WebGL blocking breaks whitelisted sites?

Posted: Sun Apr 08, 2012 2:37 pm
by dhouwn
If there are no placeholders you can always use the menu.

Re: NoScript WebGL blocking breaks whitelisted sites?

Posted: Sun Apr 08, 2012 7:43 pm
by aloishammer
dhouwn wrote:If there are no placeholders you can always use the menu.
I'm confused. Use the menu to do what? There's a very clear breakage going on:
  • Tell NoScript to block WebGL for untrusted sites
  • Trust site, either temporarily or permanently.
  • WebGL is still blocked by NoScript on the trusted site

Re: NoScript WebGL blocking breaks whitelisted sites?

Posted: Sun Apr 08, 2012 11:25 pm
by dhouwn
Oh, oops, I thought this was about unblocking blocked WebGL. I have the setting for blocking such embeddings on untrusted sites too set. I sometimes forget it's not the default.

Re: NoScript WebGL blocking breaks whitelisted sites?

Posted: Sun Apr 08, 2012 11:38 pm
by aloishammer
dhouwn wrote:Oh, oops, I thought this was about unblocking blocked WebGL. I have the setting for blocking such embeddings on untrusted sites too set. I sometimes forget it's not the default.
I have every box checked under the Embeddings tab except:

Code: Select all

Forbid <FRAME>
Forbid @font-face
Apply these restrictions to whitelisted sites too