InformAction Forums

I have the file foo.js hosted on github, accessible via two urls: http://aeosynth.github.com/foo.js, and https://raw.github.com/aeosynth/aeosynt ... ter/foo.js. Github is unblocked, and if I add a script element sourcing the first url, the script runs fine, displaying an alert (bar). If I source the second url, the script does not run. In order to make the second url work, I have to allow scripts globally, and in NoScript Options > Embeddings, I have to disable both `Forbid other plugins` and `Block every object coming from a site marked as untrusted`.

Yes, I am aware that I am abusing github as a cdn.

aeos wrote:Yes, I am aware that I am abusing github as a cdn.

Good, then what's the issue?

dhouwn wrote:

aeos wrote:Yes, I am aware that I am abusing github as a cdn.

Good, then what's the issue?

A++, would read again.

aeos wrote:Yes, I am aware that I am abusing github as a cdn.

As Giorgio.has explained before, github is correctly telling your browser that this file should be downloaded as an attachment, NOT executed inline. NoScript is just honoring that. You really shouldn't do what you're doing, for the same reason that you shouldn't use a pond at the local park as a source of drinking water, but you can look up the workaround if you insist. Search for liberoquotidiano.

Search the site and you will see the issue you are experiencing with the Github has been extensively discussed before and the reasons as well, people have taken too much time already explaining it to you. So do your due diligence and don't be lazy and try to can the attitude.

http://forums.informaction.com/viewtopi ... 569#p33541
http://forums.informaction.com/viewtopi ... 456#p33456

Javascripts in `gh-page`s get executed if github.com is allowed, so I modified my build script to use that branch. This is a superior workaround to messing with `about:config`, as it requires no user interaction beyond allowing the site.

If that works for you, great and thanks for sharing. To each their own.