Hacker News new | ask | show | jobs
by Insimwytim 18 days ago
Fascinating.

I use NoScript, not 'javascript.enabled' setting.

I checked more closely and here is what appears to be missing:

  Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://static.ietf.org/dt/12.65.2/ietf/bootstrap-icons.5b9cac4e.woff. (Reason: CORS request did not succeed). Status code: (null).
Bootstrap icons.

  Block javascript - icons won't load.
  Allow javascript - icons load.
  Block javascript again - icons load, unless tab is closed and then opened again.
This behavior has been observed previously.

I tried to selectively block css to see how it's tied to javascript.

  Block javascript, block css from static.ietf.org - icons won't load, page layout is broken.
  Allow javascript, block css from static.ietf.org - the icons won't load, layout is fine.
Evidently, with javascript blocked, layout css loads fine, but bootstrap icons only able to load when javascript is not blocked.

'javascript.enabled' setting seem to has no effect on icons. However, unlike NoScript, it does not provide any domain separation/granularity.