Skip to content

'Top-Level trusted' sometimes still does not work and breaks websites until manual (ctrl-f5) reload #408

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
tokariu opened this issue Dec 20, 2024 · 8 comments
Labels
question Further information is requested

Comments

@tokariu
Copy link

tokariu commented Dec 20, 2024

FF v133.0.3 / NS v11.5.2

Having checked 'Top-Level trusted' in the settings still does not work every now and then.
then it breaks the site due to not activating js for the current visited top-level-domain. a ctrl-f5 reload fixes the bug most of the time for the visited site.
this happens on random sites and not every time, but on a pretty regular basis.
youtube is broken since month' (1st video click might work, the 2nd doesn't)
this error is not just tied to youtube, it happens on any website - just sometimes.

I just found that there was an issue before, so this is a kind of a continuation of it: #388

@hackademix
Copy link
Owner

Can you see this happening on 12.0.901?

@hackademix hackademix added the question Further information is requested label Dec 21, 2024
@tokariu
Copy link
Author

tokariu commented Dec 21, 2024

Can you see this happening on 12.0.901?

installed, reporting back after testing for a while.

@tokariu
Copy link
Author

tokariu commented Dec 29, 2024

after a few days of testing, I recognized no problems with the exception of youtube - which is still broken (youtube -> search video -> click on any video -> it gets stuck loading, the pixel-progress bar on top of the site is stuck at approx 75%) it's working if I uninstall the noscript addon.

@tokariu
Copy link
Author

tokariu commented Dec 30, 2024

I notice that visiting imdb.com and clicking some movie details is crashing the FF tab when NoScript is enabled. It shows me a tab-has-crashed window and I have to reload the tab. in the 2nd attempt it is working for that particular page. Clicking other links or movies reintroduce the issue again.

@hackademix
Copy link
Owner

Could you please:

  1. Manually upgrade to 12.1.901
  2. Check whether the 2 problems persist
  3. If they do, share your NoScript Options>Settings>Export (privately, if you prefer, to the email on the top right of https://maone.net)

? Thanks!

@tokariu
Copy link
Author

tokariu commented Jan 1, 2025

alright, will test and report again.

@humanzgnome
Copy link

humanzgnome commented Jan 13, 2025

Regarding "Temporarily set top-level sites to TRUSTED" intermittently not working:
I have version 12.1.1. The bug occurs on the first loading from a particular domain name. I use tinkercad.com to demonstrate. This page relies on script to load nearly everything displayed, the script is blocked and loading hangs with just a "busy" icon displayed. Any subsequent use of the domain, in my example tinkercad.com, works as expected. So, apparently, the top level is being set to TRUSTED - just not in time for that first page load. One must restart the browser to see the behavior again.
Here are steps to recreate behavior:
concisely:
enable "Temporarily set top-level sites to TRUSTED"
close the browser, restart the browser
navigate to tinkercad.com, loading hangs
click reload button, loading succeeds
navigate to tinkercad.com/things, loading succeeds

repeat and see same behavior"
close the browser, restart the browser
navigate to tinkercad.com, loading hangs
click reload button, loading succeeds
navigate to tinkercad.com/things, loading succeeds

now reverse the page load order and see first (different) load from domain hang
close browser, restart the browser
navigate to tinkercad.com/things, loading hangs
navigate to tinkercad.com, loading succeeds

TLDR:
exactly what I did (used new profile with noscript and no other changes)
add new profile
continue without account
add a name (to the profile), I used "zzz"
extensions/visit chrome store
search for noscript
add (noscript) to chrome. Version is 12.1.1
close "turn on sync" with the upper right X
pin it to toolbar
view noscript options by clicking the "wrench" icon
enable "Temporarily set top-level sites to TRUSTED" by "checking" the box
close the "noscript settings" tab
close the browser
restart the browser
clicking the user icon in the upper right, select the newly created profile, mine is "zzz"

navigate to tinkercad.com, loading hangs
click reload button, loading succeeds
navigate to tinkercad.com/things, loading succeeds

repeat (and see same behavior):
close browser, restart the browser
select the newly created profile, mine is "zzz"

navigate to tinkercad.com, loading hangs
click reload button, loading succeeds
navigate to tinkercad.com/things, loading succeeds

now reverse the page load order
close browser, restart the browser
select the newly created profile, mine is "zzz"

navigate to tinkercad.com/things, loading hangs
navigate to tinkercad.com, loading succeeds

@tokariu
Copy link
Author

tokariu commented Mar 31, 2025

alright, will test and report again.

@hackademix regarding my previous testings.. it seems like google changed the way how things work at youtube.

before the issue, I was able to run youtube videos fine with just "Top-Level trusted" so that only youtube.com scripts are allowed.
it seems youtube also REQUIRES now googlevideo.com, google.com and gstatic.com to be whitelisted as trusted to be able to work.
(I know some of these are whitelisted by default in noscript when you install noscript fresh from scratch, but I decided to delete all whitelistings before so I have full control and I prefer this more privacy oriented approach.)

so if those 3 are not whitelisted youtube videos will play only for ~20 seconds and then just stop. Skipping in the timeline with the seeking bar does not work either.

It works fine if you whitelist them all to "temporarily trusted" or "trusted" as seen in this pic:
Image

However, I don't like giving these 3 domains general whitelistings for all websites. So I leave them untrusted and I have to whitelist all 3 of them EACH time I want to watch a youtube video.

As said: previously, before I noticed the issue, youtube videos worked just fine with only youtube.com whitelisted. so I guess youtube changed something in their backend that requires the other sites now.

I wish there was a way to fix this without whitelisting all the other domains.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question Further information is requested
Projects
None yet
Development

No branches or pull requests

4 participants
@hackademix @tokariu @humanzgnome and others