Constant Aw Snap! using google search from browser

[GoogleCodeExporter]

What steps will reproduce the problem?
1. Launch new chrome tab
2. Google search for something in the chrome search box

What is the expected output? What do you see instead?
Expect Google search results. Get Chrome Oh Snap! instead.

What version of the product are you using? On what operating system?
ScriptSafe v1.0.6.18
Chrome Version 41.0.2272.76 (64-bit)
on Mac, but was also experiencing this yesterday on other installations (I have 
chrome installed on Ubuntu 14.04 on two other computers, and it syncs my 
extensions, and Chrome keeps itself up-to date, so presumably the same thing is 
happening across all my computers)

Please provide any additional information below.
Toggling scriptno also seems to toggle whether or not a google search results 
in an Oh Snap! result, so it seemed a reasonable guess that scriptno is causing 
this behavior.

Original issue reported on code.google.com by chris.mc...@gmail.com on 6 Mar 2015 at 3:05

[GoogleCodeExporter]

I'm experiencing the same thing. Thanks to China's wall slowing things down, 
I've narrowed down the culprit to:

https://www.google.com/xjs/_/js/sdch=d/k=xjs.s.en_US.87HfdAGnAmg.O/m=sx,c,sb,cdo
s,cr,elog,jsa,r,hsm,j,p,d,csi/am=pIj6W4wwlAV1AlEH/rt=j/d=1/t=zcms/rs=ACT90oH8a6O
_t9ht7smzQbw0is0Tv6IBtQ

The weird strings do not seem to be cookie dependent (confirmed using wget)

With ScriptSafe enabled, Chrome tends to generate a "decode failure", which 
seems to be extracting malformed gzip and generates a gigantic mess (if I 
interrupt it before it "finishes loading", sometimes I see a large mess of bad 
unicode characters). With ScriptSafe disabled, the script decodes correctly.

Original comment by hqm.andr...@gmail.com on 7 Mar 2015 at 2:34

[GoogleCodeExporter]

I'm having this same issue. Setting ScriptSafe to "allow" www.google.com causes 
my Chrome browser tab to crash when I attempt to access the main Google page or 
run a Google search.

Original comment by fjala...@gmail.com on 8 Mar 2015 at 1:03

[GoogleCodeExporter]

I as well having the same issue. "Allowed & Trust" www.google.com home page, 
however, getting Aw, Snap!. When I disable ScriptSafe, www.google.com home page 
works fine. Please help.

Original comment by JFlore...@gmail.com on 9 Mar 2015 at 4:28

[GoogleCodeExporter]

Confirmed here as well.

ScriptSafe v1.0.6.18
Chrome Version 41.0.2272.76m
Windows 7 x64

Original comment by efi...@gmail.com on 9 Mar 2015 at 10:10

[GoogleCodeExporter]

Had this issue too. I fixed it by doing the following:
1. Set as trusted: apis.google.com/, clients5.google.com, www.gstatic.com
2. Signed out from my Google Account
3. Closed all my pinned tabs
4. Deleted cached files/images since the beginning of time
5. Restarted Chrome

Kind of a "hard restart" approach, though.

Original comment by alejandr...@gmail.com on 10 Mar 2015 at 4:56

[GoogleCodeExporter]

I've been getting this same issue for about a week or so now.

ScriptSafe 1.0.6.18
Chrome 40.0.2214.115 m
Windows 7 x64

I can confirm that #5's solution works, but a word to the wise; be sure to back 
up your ScriptSafe and AdBlock (and any other extension whose settings would be 
onerous to recreate) settings before you delete your cache.  I learned this the 
hard way.

:(

Original comment by j...@windyoaks.com on 11 Mar 2015 at 1:36

[GoogleCodeExporter]

Was having this same issue, but after an update triggered by visiting the About 
page in Settings, things have returned to normal.

Original comment by KampfVer...@gmail.com on 11 Mar 2015 at 6:38

[GoogleCodeExporter]

This problem exists on OSX as well.

ScriptSafe v1.0.6.18
Google Chrome Version 41.0.2272.76 (64-bit)
OS X 10.10.2

The reason this seems to be happening is updates to the google search results 
page. It fails to load if certain script reports do not respond. It seems many 
places are going to this to prevent you from viewing content if you are using 
an ad or script blocker. In google's case I think it is something to do with 
search analytics.

Original comment by bmmcwh...@gmail.com on 12 Mar 2015 at 3:18

[GoogleCodeExporter]

I had the same issue but it seems to clear up after deleting cached 
files/images since the beginning of time.

Original comment by mcaj...@gmail.com on 12 Mar 2015 at 8:44

[GoogleCodeExporter]

ScriptSafe v1.0.6.18
Version 43.0.2327.5 dev-m (64-bit)
Windows 8.1

restarting the browser seems to fix the issue for a little bit but always seems 
to come back.

Original comment by tikico...@gmail.com on 13 Mar 2015 at 5:29

[GoogleCodeExporter]

[deleted comment]

[GoogleCodeExporter]

Confirmed #9.  Clearing all cached files and images since the beginning of time 
resolved the problem, at least temporarily.

Original comment by andrex.e...@gmail.com on 13 Mar 2015 at 9:39

[GoogleCodeExporter]

Windows 8.1
Chrome Version 41.0.2272.76 (Chrome Portable)

ScriptSafe set to enable-globally

The "Aw Snap" comes back even if I start over with a fresh portable 
installation. Cleaning is only a temporary solution.

Original comment by hqm.andr...@gmail.com on 13 Mar 2015 at 10:48

[GoogleCodeExporter]

Confirmed as having the same issue on Ubuntu 14.04 LTS. Have the issue 
intermittently on Windows 8.  Closing my duplicate issue (295).

Original comment by dbos...@gmail.com on 13 Mar 2015 at 2:49

[GoogleCodeExporter]

After some investigation it seems the author has not been to the google project 
site since 2013 and the last update from May 2014 was never uploaded tot he 
project page.

It does not appear that this will be fixed any time soon and in fact when I 
make changes google adapts and I get the 'aw snap' error just a few hours after 
I find a fix.

The only real fix is to completely block scripts on all google sites. This will 
break almost everything on gmail, calendars and other utility pages and some 
things on youtube but for the most part youtube continues to work.

Google relies on cross site scripting for their targeted ad features and are 
being aggressive about not providing content to those who block this content.

I can confirm that right now if you block www.google.com,  and *.gstatic.com 
the errors seem to go away completely. 

Original comment by bmmcwh...@gmail.com on 13 Mar 2015 at 4:20

[GoogleCodeExporter]

I, personally am okay with whitelisting google entirely, but even that doesn't 
solve the issue as there is some hidden scripting that is being blocked and 
causing a failure.  

Original comment by dbos...@gmail.com on 13 Mar 2015 at 4:24

[GoogleCodeExporter]

Exactly: we all had them whitelisted, I'm sure, and for some reason that still 
doesn't fix the problem.  That's the whole reason there's a bug report.

I can confirm that blacklisting google.com and *.gstatic.com has made it stop 
crashing for me as well.

Original comment by gmitch...@rmgmwf.com on 13 Mar 2015 at 4:32

[GoogleCodeExporter]

Blacklisting google.com and/or *.gstatic.com seems to break Google Maps. This 
isn't a practical fix for me. Unless someone decides to write a new 
script-blocker extension, or ScriptSafe is updated, then I may have to turn it 
off as the default option, and only turn it back on in limited situations 
(unfamiliar site).

Original comment by excalibu...@yahoo.com on 14 Mar 2015 at 3:47

[GoogleCodeExporter]

excalibu...  I feel your pain.  In your case your best alternative is the set 
scriptSafe to allow everything that isn't blacklisted and just blacklist sites 
you do not want scripts to run on. I was looking for a way to contact the 
author but there appears to be no way to do so via a google code project.

Original comment by bmmcwh...@gmail.com on 14 Mar 2015 at 7:33

[GoogleCodeExporter]

on the aw snap page, I pressed and held the reload and clicked on empty cache 
and reload and I did not have an issue that load.

Original comment by tikico...@gmail.com on 15 Mar 2015 at 7:34

[GoogleCodeExporter]

I'm experiencing the same issue and I can confirm everything above. Is this now 
abandonware? Did the developer really abandon this, or is this extension still 
being updated?

If this extension has been abandoned, does anyone have a recommended 
alternative?

Original comment by Nokkenb...@gmail.com on 16 Mar 2015 at 2:01

[GoogleCodeExporter]

I hope ScriptNo hasn't been abandoned. However, I'm not comfortable running
out-of-date software, so I did quite a bit of evaluation of other options.

I'm been testing µMatrix for about a week, and have been very pleased with
the design and flexibility. The downside is that it is even farther into
the realm where I'd have trouble recommending it for someone without some
Internet savvy. But for security-conscious folks, it is amazing. (It even
incorporates various domain sinkholing lists like MVPS.)

Original comment by whin...@gmail.com on 16 Mar 2015 at 2:12

[GoogleCodeExporter]

Given the line breaks, I'm going to go out on a limb and guess you're using the 
Checker Plus by Gmail. I see Jason still hasn't fixed that issue if so.

Anyway, I emailed the developer to ask if he abandoned it. He probably did, but 
I might as well have some official confirmation.

I checked µMatrix out and although it seems to be great (albeit very complex), 
it doesn't appear to have the same functions that ScriptSafe does, such as the 
permanent domain whitelisting. At least, that is what appears to be the case 
from the Support posts on the extension page.

Original comment by Nokkenb...@gmail.com on 16 Mar 2015 at 2:18

[GoogleCodeExporter]

*.googleusercontent.com
*gstatic.com
*google.com

In using µMatrix as mentioned above I noticed another domain that google is 
pulling scripts from that does not show up in ScriptSave when you visit google. 
I'm still testing out µMatrix and as stated above it's not simple nor for 
those who do not have an in-depth understanding of internet protocols. I 
haven't tested whitelisting those yet as running ScriptSafe and µMatrix at the 
same time would be a big conflict.

OffSubject, but to Nokkenb...  If he is using email to respond those line 
breaks are exactly correct. RFC standards for email are that lines should brea 
at every 76th character or before, if your email doesn't do this it's a 
standards violation. No laws or regulations so we cant control when email 
clients don't follow standards, just like when web sites use cross site 
scripting( a violation of the original http standard). The point is that's not 
broken because of the line breaks, it's actually correct.

Original comment by bmmcwh...@gmail.com on 16 Mar 2015 at 2:43

[GoogleCodeExporter]

I've found some other script blockers which may be useful replacements:

https://chrome.google.com/webstore/detail/scriptblock/hcdjknjpbnhdoabbngpmfekaec
npajba

https://chrome.google.com/webstore/detail/script-defender/celgmkbkgakmkfboolifhb
llkfiepcae

I don't know if those would be better than µMatrix, but they seem better than 
ScriptSafe at least. They are still updated, too.

bmmcwh..., my bad. I was just taking a wild guess. I was not aware of that. I 
just know that it's something a certain Gmail Checker extension I use does when 
quick-replying, so I thought maybe that was why.

Original comment by Nokkenb...@gmail.com on 16 Mar 2015 at 2:49

[GoogleCodeExporter]

Nevermind, ScriptBlock hasn't been updated since 2013, even longer ago than 
ScriptSafe. Only Script Defender is still frequently updated:

https://chrome.google.com/webstore/detail/script-defender/celgmkbkgakmkfboolifhb
llkfiepcae

Original comment by Nokkenb...@gmail.com on 16 Mar 2015 at 3:11

[GoogleCodeExporter]

What with google code shutting down and the lack of attention to this 
extension, I'm guessing we'll all be out of luck as far as scriptsafe is 
concerned. Thanks for the suggestions for other options.

I'm almost convinced to got back to firefox and noscript!

almost.

Original comment by jtedw...@gmail.com on 16 Mar 2015 at 3:37

[GoogleCodeExporter]

I've been using µMatrix, suggested by another above, and it works 
fantastically, albeit there is a steep learning curve and sites will break 
often. The extension is continually improving, though, and works great at 
helping you understand just what data you're sharing with the site!

https://chrome.google.com/webstore/detail/%C2%B5matrix/ogfcmafjalglgifnmanfmniei
poejdcf

https://github.com/gorhill/uMatrix

Original comment by Nokkenb...@gmail.com on 17 Mar 2015 at 11:31

[GoogleCodeExporter]

I tried to contact the developer to see about forking this and moving it to 
github.  And I have not heard from him.  I know that I no longer have the 
issue.  The only problem I have with uMatrix is it is not easy to use.  Which 
is ok for me, but I have my mom and wife (who are not technical) using script 
safe.

Original comment by tikico...@gmail.com on 1 Apr 2015 at 3:31

[GoogleCodeExporter]

The issue seems to have gone away for me as well. I assume Google changed 
something as I've not seen any updates on this project.  It would be really 
nice to get it open sourced.

Original comment by dbos...@gmail.com on 1 Apr 2015 at 3:40

[GoogleCodeExporter]

Definitely. I would love to see someone take this up and revamp it. At
this time, I'm content with uMatrix (which is actually really good),
but like tikico... above said, it's power user stuff and may not be
best for those who aren't interested in climbing the learning curve.

Original comment by Nokkenb...@gmail.com on 1 Apr 2015 at 3:44

[GoogleCodeExporter]

Running Windows 10 tech preview, also experiencing aw snap issues for past 
couple of weeks. Been trying different fix suggestions but still getting Aw 
Snap.

Original comment by pdpen...@gmail.com on 6 May 2015 at 4:50

[GoogleCodeExporter]

Same here. Is there a decent alternative for ScriptSafe? That seems to be the 
common problem here.

Original comment by dtr...@gmail.com on 10 May 2015 at 2:31

[GoogleCodeExporter]

If you can deal with the learning curve, I highly recommend uMatrix. It's far 
superior to ScriptSafe and far more effective. As for a ScriptSafe analog, I'm 
not sure. Chrome doesn't have many options in that department, and those which 
are available are typically downgrades.

I recommend checking out uMatrix.

https://chrome.google.com/webstore/detail/%C2%B5matrix/ogfcmafjalglgifnmanfmniei
poejdcf?hl=en

His other work, uBlock (now uBlock Origin) is also superb, though it requires 
some tweaking to use them simultaneously.

Original comment by Nokkenb...@gmail.com on 10 May 2015 at 3:46

[GoogleCodeExporter]

Pretty much everyone has moved to uMatrix.

Original comment by bmmcwh...@gmail.com on 10 May 2015 at 4:07

[GoogleCodeExporter]

Has Anybody able to solved this "Aw Snap" issue on Google Search Results Page ?
#1 Comment seems promising to me though I have not investigated much.

I developed Requestly[0] and you can use Block feature to block Urls in it.
There are some Windows users who have observed the same "Aw Snap" issue on 
Google Search results page only.

Previously, Clearing cache did the trick for everybody but recently a new user 
is also observing it but not the rest. 

Worth trying!! Give it a try and I am deeply interested in knowing if someone 
has solution to this problem. 

[0]: 
https://chrome.google.com/webstore/detail/requestly/mdnleldcmiljblolnjhpnblkcekp
dkpa

Original comment by sachinja...@gmail.com on 10 May 2015 at 8:10

[GoogleCodeExporter]

I've started using DuckDuckGo as a search engine. It works fine with Noscript 
and has results that are just as good as google.

Original comment by mil...@gmail.com on 10 May 2015 at 3:27

[GoogleCodeExporter]

For me, DuckDuckGo never got the same results, and the results were less 
accurate. Plus, being a Google user the personalized results were useful to me. 
DuckDuckGo is a nice alternative, and certainly better than StartPage, but I 
never found what I was looking for as easily with it.

Original comment by Nokkenb...@gmail.com on 11 May 2015 at 5:07

[GoogleCodeExporter]

I just tried clearing cache.  If it starts happening again I may have to switch 
search engines or ditch Chrome and go back to Firefox.

Original comment by Ztra...@gmail.com on 12 May 2015 at 8:02

[GoogleCodeExporter]

Apparently this doesn't happen when using incognito window.

Original comment by alejandr...@gmail.com on 16 May 2015 at 2:24

[GoogleCodeExporter]

I second the other suggestions to move onto uMatrix and forget about 
ScriptSafe. It doesn't appear that it will be updated again.

uMatrix does have a learning curve, but no more than ScriptSafe did for me. I 
do wish they had a brief FAQ page, or even just a legend for the chart (click 
on upper half of a line or box to Allow, click on lower half of the line/box to 
Block), but I managed to figure it out.

I didn't think ScriptSafe was beginner-friendly either. I would have never 
recommended ScriptSafe to people who just want to turn on the computer/tablet 
and run a browser, without fiddling with all sorts of virtual knobs and dials. 
ScriptSafe also broke a lot of websites, until you figured out which scripts to 
allow. So uMatrix isn't really any worse or any better in those aspects.

If you were comfortable with ScriptSafe, you should probably adapt to uMatrix 
fairly quickly.

Original comment by excalibu...@yahoo.com on 16 May 2015 at 3:44