nosiif in firefox browser

[ghajini]

Prerequisites

• I verified that this is not a filter list issue. Report any issues with filter lists or broken website functionality in the uAssets issue tracker.
• This is NOT a YouTube, Facebook or Twitch report. These sites MUST be reported by clicking their respective links.
• This is not a support issue or a question. For support, questions, or help, visit /r/uBlockOrigin.
• I performed a cursory search of the issue tracker to avoid opening a duplicate issue.
• The issue is not present after disabling uBO in the browser.
• I checked the documentation to understand that the issue I am reporting is not normal behavior.

I tried to reproduce the issue when...

• uBO is the only extension.
• uBO uses default lists and settings.
• using a new, unmodified browser profile.

Description

when i use goflix.sbs##+js(nosiif) on firefox android, it does not log setInterval call

 <script>
        setInterval(function(){
            $("form").submit();
        }, 2000);
    </script>

when i set breakpoint at setInterval , i see the script

A specific URL where the issue occurs.

https://goflix.sbs/en/mirror/96e887fdaeb95099124dfdae16748ef0

Steps to Reproduce

1. Add in my filters

goflix.sbs##+js(nosiif)
||goflix.sbs^$document,csp=sandbox allow-same-origin allow-scripts allow-modals allow-orientation-lock allow-pointer-lock allow-presentation allow-top-navigation allow-popups,badfilter

2. navigate to https://goflix.sbs/en/mirror/96e887fdaeb95099124dfdae16748ef0
3. ad redirect is seen

Expected behavior

i could see logging in ublock logger & thus foil ad redirect with goflix.sbs##+js(nosiif, /\.submit/, 2000)

Actual behavior

can't see setInterval call being logged

uBO version

1.61

Browser name and version

firefox android 132.0

Operating System and version

android 12

[gorhill]

Do you see it when forcing a reload of the page?

[ghajini]

i don't see even when forcing reload of the page
i checked with firefox android 132.0 ,firefox android nightly 134.0a1

[gorhill]

With Firefox 128, it became possible to inject the scriptlets directly into the MAIN world, so the solution is probably to avoid going through a blob for Firefox 128+.

[uBlock-user]

it became possible to inject the scriptlets directly into the MAIN world

So a website CSP no longer gets applied on uBO's scriptlets ? Because this was the reason the blob: workaround had to be implemented for Firefox.

[ghajini]

i want to note the fact that this issue only happens on firefox android browser & NOT on firefox desktop browser/chrome

[gorhill]

I could reproduce on Firefox desktop.

[gorhill]

See if gorhill/uBlock@b1a00145bd helps in latest dev build.

[stephenhawk8054]

I think the update works more reliably for some cases where I needed HTML filtering.

[gorhill]

Nothing has changed in the code paths for HTML filtering. The change is essentially that scriptlets are directly injected as in Chromium, and to fallback to blob-based injection if direct injection fails.

[stephenhawk8054]

Yeah, I mean I was testing scriptlet solution for those domains, however they didn't work if I refresh multiple times (or click on "Duplicate" the tab) so I resorted to HTML filtering.

The new update makes the scriptlet solution works more stable for me.

[ghajini]

firefox android stable/nightly not support ubo dev version installation from github so only test when released to stable

[stephenhawk8054]

@ghajini Which android version are you using? From android 10 you can install xpi file as extensions. I'm using uBO dev version on my Firefox android right now.

[ghajini]

ok i installed latest ubo dev 1.61.3b3 on firefox android as per @stephenhawk8054 idea, fix is working fine for this case as well as some other cases