[frio] Layering issues with NoScript activated

[ChibaPet]

There are elements rendering over or under other elements in a way that's
clearly not what's wanted. Observed with Firefox, but not in a private
window thus far from the same browser session

Not observed with Chrome or Chromium.

Friendica Version:

root@common /var/www/html# git branch

• stable
  root@common /var/www/html# git log | head -1
  commit 7109d2a

PHP version:

2:7.4+76 (Debian Bullseye)

SQL version:

MariaDB 1:10.5.15-0+deb11u1 (Debian Bullseye)

Browser:

Firefox ESR 102.5.0esr-1~deb11u1 (Debian Bullseye)

[ChibaPet]

Random additional observation, I see this with: Latest Activity, Latest Creation. I don't see it with: Latest Posts. Also, I haven't seen this yet on the second of the two instances I have up.

[ChibaPet]

And more information, which is kind of fascinating. Today I learned that NoScript, Privacy Redirect, and AdBlock Plus are all available for Chromium, so I installed them. Same issue appears on Firefox. I isolated it to NoScript. With NoScript active, even if I allow scripts to run from my own site (which is all I actually want) the issue appears. If I turn NoScript off for the tab and then back on, things render properly. Same behaviour observed in both Firefox and in Chromium.

[MrPetovan]

Thank you for the added information!

[ChibaPet]

Changed the title again as it behaves identically under Chromium with NoScript. Also noted, I couldn't get a file picker dialog to upload an image with NoScript enabled, despite having my site listed as allowed.

EDIT: Might be worth removing the "theme specific" tag as I saw essentially the same thing in the other available themes too. I'll do it if I can, but I don't see an interface element to let me amend tags.

[MrPetovan]

Does the Developer Console warns about the blocked scripts?

[ChibaPet]

Looking. My web development skills are weak, but I'll see what I can find.

[ChibaPet]

Horizontal is Firefox. Vertical is Chromium (Version 107.0.5304.110 (Official Build) built on Debian 11.5, running on Debian 11.5 (64-bit))

In the Chromium screenshot, both the noted sites are remote.

[MrPetovan]

The listed blocks are about Mastodon video attachment, nothing related to local scripts 😕

[ChibaPet]

As a random note, I'm trying out uBlock Origin with default-third-party deny, and thus far it doesn't present the same issue. While working with NoScript is a fantastic goal, this might be something to suggest if it works out. I'll comment further once I've run it for a few days.