hackademix
Can't create new Proton Mail account, even when Noscript is globally disabled
Ubuntu 22.04.5 LTS (also verified on Windows 10) Firefox 141.0 Noscript 13.0.8 I normally have other extensions installed, but I was able to narrow this down to stock Firefox with only stock Noscript installed.
Can't enter text into the Username field when trying to create a new account. Disabling Noscript per-tab or globally does not help. ~~Even running firefox with -safe-mode to disable all plugins does not help (that seems extra odd to me).~~ Uninstalling Noscript is the only thing that helps.
Steps to reproduce: Visit https://proton.me Turn on javascript for the site. Select "Create a free account" If you are given a selection of account types, choose the free account. I often get an error here and have to refresh the page. Click in the username field. You cannot type, nor can you paste, into this field. Interestingly, the password field works fine.
Only uninstalling noscript allows this form field to work.
Looking at the source code HTML, it looks like this field is set to readonly. I'm assuming there is some javascript that removes the readonly attribute, but it does not appear to be running properly. When run in firefox without Noscript installed, the readonly attribute is gone.
Let me know if you need additional information.
[Edited (see strikethrough above) - apparently you need to close all browser windows to start firefox with -safe-mode. That DOES resolve the issue]
I get the following errors in the browser console, with Noscript set to "Disable restrictions globally":
AbortError: Actor 'Conduits' destroyed before query 'RuntimeMessage' was resolved ConduitsParent.sys.mjs:383
The resource at “https://reports.proton.me/reports/csp” was blocked by OpaqueResponseBlocking. Reason: “nosniff is true and mimeType is an opaque-blocklisted MIME type or its essence is 'text/plain'”.
The resource at “https://reports.proton.me/reports/csp” was blocked by OpaqueResponseBlocking. Reason: “after sniff: nosniff is true”. 2
None of those errors occur without Noscript.