Page 1 of 1

NoScript, Nightly, and Twitter Images

Posted: Thu Aug 02, 2012 5:00 pm
by GeorgeHahn
When uploading an image to Twitter, Nightly hangs, eventually giving a 'script frozen' warning for: "Script: chrome://noscript/content/RequestWatchdog.js:1669"

After updating to the latest development version of NoScript, the hang still occurs, but instead of an eventual 'script frozen' warning, I am presented with an XSS warning. The warning showed as a bar under the address bar. I told it to permanently allow Twitter, and I am now unable to reproduce the issue.

Fx Version: 17.0a1 (2012-08-02)
User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/17.0 Firefox/17.0

Extensions
Name Version Enabled ID
Adblock Plus 2.1.2 true {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
FabTabs 1.4.6 true fabtab@captaincaveman.nl
facepaste 1.5 true facepaste.firefox.addon@azabani.com
Flashblock 1.5.15.1 true {3d7eb24f-2740-49df-8937-200b1cc08f8a}
Ghostery 2.8.0.2 true firefox@ghostery.com
Gmelius™, Towards a Better Gmail 5.4 true gmailadsremover@florian.bersier
Greasemonkey 0.9.22 true {e4a8a97b-f2ed-450b-b12d-ee082ba24781}
klout 1.6 true kwtr-for-firefox@klout.com
Location Bar Enhancer 4.9 true UIEnhancer@girishsharma
Nightly Tester Tools 3.3 true {8620c15f-30dc-4dba-a131-7c5d20cf4a29}
NoScript 2.5rc6 true {73a6fe31-595d-460b-a920-fcc0f8843232}
Omnibar 0.7.13.20120613 true omnibar@ajitk.com
Tab Badge 1.8 true badge@darktrojan.net
Tabs Always In Titlebar 1.0.1 true TabsAlwaysInTitlebar@SoapyBrew

Re: NoScript, Nightly, and Twitter Images

Posted: Thu Aug 02, 2012 8:10 pm
by Giorgio Maone
Could you please revert to your configuration where you got the XSS warning (Twitter non whitelisted, maybe?) and check your Error Console (ctrl+shift+J) for any message starting with "[NoScript", then copy them here?

Thank you.

Re: NoScript, Nightly, and Twitter Images

Posted: Sat Sep 08, 2012 11:22 pm
by Guest
I am unable to upload photographs to Twitter and experience similar behavior to that described by GeorgeHahn. After pressing the "Tweet" button, Firefox hangs until displaying the script frozen warning. Twitter then reports that uploading a photo timed out.

This was in the Error Console:

Code: Select all

[NoScript DOS] Aborted potential DOS attempt: {POST https://upload.twitter.com/i/tweet/create_with_media.iframe <<< https://twitter.com/ - 7}
(function () {MaxRunTime.increase(40);return this.filterXSS(abeReq);})
I am running Firefox 15.0.1 on Windows 7 64-bit with NoScript 2.5.4. I disabled NoScript and was able to successfully tweet a photo without delay.

Thank you,

David July