search

TetragrammatonHermit / scriptno

Automatically exported from code.google.com/p/scriptno
2 stars 0 forks source link

Constant Aw Snap! using google search from browser #291

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago 
What steps will reproduce the problem?
1. Launch new chrome tab
2. Google search for something in the chrome search box

What is the expected output? What do you see instead?
Expect Google search results. Get Chrome Oh Snap! instead.

What version of the product are you using? On what operating system?
ScriptSafe v1.0.6.18
Chrome Version 41.0.2272.76 (64-bit)
on Mac, but was also experiencing this yesterday on other installations (I have 
chrome installed on Ubuntu 14.04 on two other computers, and it syncs my 
extensions, and Chrome keeps itself up-to date, so presumably the same thing is 
happening across all my computers)

Please provide any additional information below.
Toggling scriptno also seems to toggle whether or not a google search results 
in an Oh Snap! result, so it seemed a reasonable guess that scriptno is causing 
this behavior.

Original issue reported on code.google.com by chris.mc...@gmail.com on 6 Mar 2015 at 3:05

GoogleCodeExporter commented 9 years ago 
I'm experiencing the same thing. Thanks to China's wall slowing things down, 
I've narrowed down the culprit to:

https://www.google.com/xjs/_/js/sdch=d/k=xjs.s.en_US.87HfdAGnAmg.O/m=sx,c,sb,cdo
s,cr,elog,jsa,r,hsm,j,p,d,csi/am=pIj6W4wwlAV1AlEH/rt=j/d=1/t=zcms/rs=ACT90oH8a6O
_t9ht7smzQbw0is0Tv6IBtQ

The weird strings do not seem to be cookie dependent (confirmed using wget)

With ScriptSafe enabled, Chrome tends to generate a "decode failure", which 
seems to be extracting malformed gzip and generates a gigantic mess (if I 
interrupt it before it "finishes loading", sometimes I see a large mess of bad 
unicode characters). With ScriptSafe disabled, the script decodes correctly.

Original comment by hqm.andr...@gmail.com on 7 Mar 2015 at 2:34

GoogleCodeExporter commented 9 years ago 
I'm having this same issue. Setting ScriptSafe to "allow" www.google.com causes 
my Chrome browser tab to crash when I attempt to access the main Google page or 
run a Google search.

Original comment by fjala...@gmail.com on 8 Mar 2015 at 1:03

GoogleCodeExporter commented 9 years ago 
I as well having the same issue. "Allowed & Trust" www.google.com home page, 
however, getting Aw, Snap!. When I disable ScriptSafe, www.google.com home page 
works fine. Please help.

Original comment by JFlore...@gmail.com on 9 Mar 2015 at 4:28

GoogleCodeExporter commented 9 years ago 
Confirmed here as well.

ScriptSafe v1.0.6.18
Chrome Version 41.0.2272.76m
Windows 7 x64

Original comment by efi...@gmail.com on 9 Mar 2015 at 10:10

GoogleCodeExporter commented 9 years ago 
Had this issue too. I fixed it by doing the following:
1. Set as trusted: apis.google.com/, clients5.google.com, www.gstatic.com
2. Signed out from my Google Account
3. Closed all my pinned tabs
4. Deleted cached files/images since the beginning of time
5. Restarted Chrome

Kind of a "hard restart" approach, though.

Original comment by alejandr...@gmail.com on 10 Mar 2015 at 4:56

GoogleCodeExporter commented 9 years ago 
I've been getting this same issue for about a week or so now.

ScriptSafe 1.0.6.18
Chrome 40.0.2214.115 m
Windows 7 x64

I can confirm that #5's solution works, but a word to the wise; be sure to back 
up your ScriptSafe and AdBlock (and any other extension whose settings would be 
onerous to recreate) settings before you delete your cache.  I learned this the 
hard way.

:(

Original comment by j...@windyoaks.com on 11 Mar 2015 at 1:36

GoogleCodeExporter commented 9 years ago 
Was having this same issue, but after an update triggered by visiting the About 
page in Settings, things have returned to normal.

Original comment by KampfVer...@gmail.com on 11 Mar 2015 at 6:38

GoogleCodeExporter commented 9 years ago 
This problem exists on OSX as well.

ScriptSafe v1.0.6.18
Google Chrome Version 41.0.2272.76 (64-bit)
OS X 10.10.2

The reason this seems to be happening is updates to the google search results 
page. It fails to load if certain script reports do not respond. It seems many 
places are going to this to prevent you from viewing content if you are using 
an ad or script blocker. In google's case I think it is something to do with 
search analytics.

Original comment by bmmcwh...@gmail.com on 12 Mar 2015 at 3:18

GoogleCodeExporter commented 9 years ago 
I had the same issue but it seems to clear up after deleting cached 
files/images since the beginning of time.

Original comment by mcaj...@gmail.com on 12 Mar 2015 at 8:44

GoogleCodeExporter commented 9 years ago 
ScriptSafe v1.0.6.18
Version 43.0.2327.5 dev-m (64-bit)
Windows 8.1

restarting the browser seems to fix the issue for a little bit but always seems 
to come back.

Original comment by tikico...@gmail.com on 13 Mar 2015 at 5:29

GoogleCodeExporter commented 9 years ago 
[deleted comment]
GoogleCodeExporter commented 9 years ago 
Confirmed #9.  Clearing all cached files and images since the beginning of time 
resolved the problem, at least temporarily.

Original comment by andrex.e...@gmail.com on 13 Mar 2015 at 9:39

GoogleCodeExporter commented 9 years ago 
Windows 8.1
Chrome Version 41.0.2272.76 (Chrome Portable)

ScriptSafe set to enable-globally

The "Aw Snap" comes back even if I start over with a fresh portable 
installation. Cleaning is only a temporary solution.

Original comment by hqm.andr...@gmail.com on 13 Mar 2015 at 10:48

GoogleCodeExporter commented 9 years ago 
Confirmed as having the same issue on Ubuntu 14.04 LTS. Have the issue 
intermittently on Windows 8.  Closing my duplicate issue (295).

Original comment by dbos...@gmail.com on 13 Mar 2015 at 2:49

GoogleCodeExporter commented 9 years ago 
After some investigation it seems the author has not been to the google project 
site since 2013 and the last update from May 2014 was never uploaded tot he 
project page.

It does not appear that this will be fixed any time soon and in fact when I 
make changes google adapts and I get the 'aw snap' error just a few hours after 
I find a fix.

The only real fix is to completely block scripts on all google sites. This will 
break almost everything on gmail, calendars and other utility pages and some 
things on youtube but for the most part youtube continues to work.

Google relies on cross site scripting for their targeted ad features and are 
being aggressive about not providing content to those who block this content.

I can confirm that right now if you block www.google.com,  and *.gstatic.com 
the errors seem to go away completely.

Original comment by bmmcwh...@gmail.com on 13 Mar 2015 at 4:20

GoogleCodeExporter commented 9 years ago 
I, personally am okay with whitelisting google entirely, but even that doesn't 
solve the issue as there is some hidden scripting that is being blocked and 
causing a failure.

Original comment by dbos...@gmail.com on 13 Mar 2015 at 4:24

GoogleCodeExporter commented 9 years ago 
Exactly: we all had them whitelisted, I'm sure, and for some reason that still 
doesn't fix the problem.  That's the whole reason there's a bug report.

I can confirm that blacklisting google.com and *.gstatic.com has made it stop 
crashing for me as well.

Original comment by gmitch...@rmgmwf.com on 13 Mar 2015 at 4:32

GoogleCodeExporter commented 9 years ago 
Blacklisting google.com and/or *.gstatic.com seems to break Google Maps. This 
isn't a practical fix for me. Unless someone decides to write a new 
script-blocker extension, or ScriptSafe is updated, then I may have to turn it 
off as the default option, and only turn it back on in limited situations 
(unfamiliar site).

Original comment by excalibu...@yahoo.com on 14 Mar 2015 at 3:47

GoogleCodeExporter commented 9 years ago 
excalibu...  I feel your pain.  In your case your best alternative is the set 
scriptSafe to allow everything that isn't blacklisted and just blacklist sites 
you do not want scripts to run on. I was looking for a way to contact the 
author but there appears to be no way to do so via a google code project.

Original comment by bmmcwh...@gmail.com on 14 Mar 2015 at 7:33

GoogleCodeExporter commented 9 years ago 
on the aw snap page, I pressed and held the reload and clicked on empty cache 
and reload and I did not have an issue that load.

Original comment by tikico...@gmail.com on 15 Mar 2015 at 7:34

GoogleCodeExporter commented 9 years ago 
I'm experiencing the same issue and I can confirm everything above. Is this now 
abandonware? Did the developer really abandon this, or is this extension still 
being updated?

If this extension has been abandoned, does anyone have a recommended 
alternative?

Original comment by Nokkenb...@gmail.com on 16 Mar 2015 at 2:01

GoogleCodeExporter commented 9 years ago 
I hope ScriptNo hasn't been abandoned. However, I'm not comfortable running
out-of-date software, so I did quite a bit of evaluation of other options.

I'm been testing µMatrix for about a week, and have been very pleased with
the design and flexibility. The downside is that it is even farther into
the realm where I'd have trouble recommending it for someone without some
Internet savvy. But for security-conscious folks, it is amazing. (It even
incorporates various domain sinkholing lists like MVPS.)

Original comment by whin...@gmail.com on 16 Mar 2015 at 2:12

GoogleCodeExporter commented 9 years ago 
Given the line breaks, I'm going to go out on a limb and guess you're using the 
Checker Plus by Gmail. I see Jason still hasn't fixed that issue if so.

Anyway, I emailed the developer to ask if he abandoned it. He probably did, but 
I might as well have some official confirmation.

I checked µMatrix out and although it seems to be great (albeit very complex), 
it doesn't appear to have the same functions that ScriptSafe does, such as the 
permanent domain whitelisting. At least, that is what appears to be the case 
from the Support posts on the extension page.

Original comment by Nokkenb...@gmail.com on 16 Mar 2015 at 2:18

GoogleCodeExporter commented 9 years ago 
*.googleusercontent.com
*gstatic.com
*google.com

In using µMatrix as mentioned above I noticed another domain that google is 
pulling scripts from that does not show up in ScriptSave when you visit google. 
I'm still testing out µMatrix and as stated above it's not simple nor for 
those who do not have an in-depth understanding of internet protocols. I 
haven't tested whitelisting those yet as running ScriptSafe and µMatrix at the 
same time would be a big conflict.

OffSubject, but to Nokkenb...  If he is using email to respond those line 
breaks are exactly correct. RFC standards for email are that lines should brea 
at every 76th character or before, if your email doesn't do this it's a 
standards violation. No laws or regulations so we cant control when email 
clients don't follow standards, just like when web sites use cross site 
scripting( a violation of the original http standard). The point is that's not 
broken because of the line breaks, it's actually correct.

Original comment by bmmcwh...@gmail.com on 16 Mar 2015 at 2:43

GoogleCodeExporter commented 9 years ago 
I've found some other script blockers which may be useful replacements:

https://chrome.google.com/webstore/detail/scriptblock/hcdjknjpbnhdoabbngpmfekaec
npajba

https://chrome.google.com/webstore/detail/script-defender/celgmkbkgakmkfboolifhb
llkfiepcae

I don't know if those would be better than µMatrix, but they seem better than 
ScriptSafe at least. They are still updated, too.

bmmcwh..., my bad. I was just taking a wild guess. I was not aware of that. I 
just know that it's something a certain Gmail Checker extension I use does when 
quick-replying, so I thought maybe that was why.

Original comment by Nokkenb...@gmail.com on 16 Mar 2015 at 2:49

GoogleCodeExporter commented 9 years ago 
Nevermind, ScriptBlock hasn't been updated since 2013, even longer ago than 
ScriptSafe. Only Script Defender is still frequently updated:

https://chrome.google.com/webstore/detail/script-defender/celgmkbkgakmkfboolifhb
llkfiepcae

Original comment by Nokkenb...@gmail.com on 16 Mar 2015 at 3:11

GoogleCodeExporter commented 9 years ago 
What with google code shutting down and the lack of attention to this 
extension, I'm guessing we'll all be out of luck as far as scriptsafe is 
concerned. Thanks for the suggestions for other options.

I'm almost convinced to got back to firefox and noscript!

almost.

Original comment by jtedw...@gmail.com on 16 Mar 2015 at 3:37

GoogleCodeExporter commented 9 years ago 
I've been using µMatrix, suggested by another above, and it works 
fantastically, albeit there is a steep learning curve and sites will break 
often. The extension is continually improving, though, and works great at 
helping you understand just what data you're sharing with the site!

https://chrome.google.com/webstore/detail/%C2%B5matrix/ogfcmafjalglgifnmanfmniei
poejdcf

https://github.com/gorhill/uMatrix

Original comment by Nokkenb...@gmail.com on 17 Mar 2015 at 11:31