Ideas page JS bug on Firefox?

[halfer]

I’ve several times tried to use the ideas page but it does not seem to want to work for me! I am using Firefox on Linux with NoScript, which is unlikely to be a combination tested by Aha. I think I have temporarily whitelisted the things I need to (and a lot more besides) but it still falls over.

It renders, but I get some domain errors that look pretty fatal.

Loading failed for the <script> with source “https://www.googletagmanager.com/gtm.js?id=GTM-W9HDVK”.
ideas:1
Loading failed for the <script> with source “https://platform.twitter.com/widgets.js”.
ideas:1
Failed to execute 'postMessage' on 'DOMWindow': The target origin provided ('https://circleci.ideas.aha.io') does not match the recipient window's origin ('https://circleci.com').
ideas
Loading failed for the <script> with source “https://bat.bing.com/bat.js”.
ideas:1
Loading failed for the <script> with source “https://connect.facebook.net/en_US/fbevents.js”.
ideas:1
Loading failed for the <script> with source “https://www.googleadservices.com/pagead/conversion_async.js”.
ideas:1
Loading failed for the <script> with source “https://www.google-analytics.com/analytics.js”.
ideas:1
Loading failed for the <script> with source “https://pixel-geo.prfct.co/tagjs?a_id=18331&source=js_tag”.
ideas:1
[iFrameSizer][Host page: aha-idea-portal-iframe] IFrame has not responded within 5 seconds. Check iFrameResizer.contentWindow.js has been loaded in iFrame. This message can be ingored if everything is working, or you can set the warningTimeout option to a higher value or zero to suppress this warning.
application.js:8:857
Source map error: request failed with status 404
Resource URL: https://secure.aha.io/assets/idea_portals/embedded/application.js
Source Map URL: iframeResizer.map[Learn More]
Loading failed for the <script> with source “https://www.google-analytics.com/analytics.js”.
CCI-I-388:1
SecurityError: The operation is insecure.
vendor-1ac8c6442e407dfa5fcc.js:1
Source map error: request failed with status 404
Resource URL: https://circleci.ideas.aha.io/assets/vendor-1ac8c6442e407dfa5fcc.js
Source Map URL: /assets/vendor-1ac8c6442e407dfa5fcc.js.map[Learn More]
TypeError: l is null[Learn More]
idea_portals-23e04579cca04fa31b5e.js:1:59000
SecurityError: The operation is insecure.
vendor-1ac8c6442e407dfa5fcc.js:1
Source map error: request failed with status 404
Resource URL: https://circleci.ideas.aha.io/assets/idea_portals-23e04579cca04fa31b5e.js
Source Map URL: /assets/idea_portals-23e04579cca04fa31b5e.js.map[Learn More]
TypeError: l is null[Learn More]
idea_portals-23e04579cca04fa31b5e.js:1:59000
SecurityError: The operation is insecure.
vendor-1ac8c6442e407dfa5fcc.js:1

Most of that is “warning yellow”, but this is in “error red”:

Failed to execute ‘postMessage’ on ‘DOMWindow’: The target origin provided (‘https://circleci.ideas.aha.io’) does not match the recipient window’s origin (‘https://circleci.com’).

That strikes me as a security restriction that could not be caused by my unusual platform combination.

The impact of this is that when it asks me to sign in via a pop-up, I can put in an email address, but then it asks again, not doing anything with the information provided.

This is also an error, and I get this when trying to sign in:

TypeError: l is null[Learn More]

[halfer]

Following on from this, I received a create-password email from Aha, and created a password successfully. I then tried to vote on something, and it prompted me for an email, and now it asks for a password. So, I am a bit further on, but when I put in the password, it asks for the email again.

I suspect the same domain sec restrictions are preventing this working. I can’t seem to use the app outside of the iframe (which would probably resolve the problem) as it redirects back to the parent page on circleci.com.