nosiif in firefox browser

[ghajini]

Prerequisites

• I verified that this is not a filter list issue. Report any issues with filter lists or broken website functionality in the uAssets issue tracker.
• This is NOT a YouTube, Facebook or Twitch report. These sites MUST be reported by clicking their respective links.
• This is not a support issue or a question. For support, questions, or help, visit /r/uBlockOrigin.
• I performed a cursory search of the issue tracker to avoid opening a duplicate issue.
• The issue is not present after disabling uBO in the browser.
• I checked the documentation to understand that the issue I am reporting is not normal behavior.

I tried to reproduce the issue when...

• uBO is the only extension.
• uBO uses default lists and settings.
• using a new, unmodified browser profile.

Description

when i use goflix.sbs##+js(nosiif) on firefox android, it does not log setInterval call

 <script>
        setInterval(function(){
            $("form").submit();
        }, 2000);
    </script>

when i set breakpoint at setInterval , i see the script

A specific URL where the issue occurs.

https://goflix.sbs/en/mirror/96e887fdaeb95099124dfdae16748ef0

Steps to Reproduce

1. Add in my filters

goflix.sbs##+js(nosiif)
||goflix.sbs^$document,csp=sandbox allow-same-origin allow-scripts allow-modals allow-orientation-lock allow-pointer-lock allow-presentation allow-top-navigation allow-popups,badfilter

2. navigate to https://goflix.sbs/en/mirror/96e887fdaeb95099124dfdae16748ef0
3. ad redirect is seen

Expected behavior

i could see logging in ublock logger & thus foil ad redirect with goflix.sbs##+js(nosiif, /\.submit/, 2000)

Actual behavior

can't see setInterval call being logged

uBO version

1.61

Browser name and version

firefox android 132.0

Operating System and version

android 12

[gorhill]

Do you see it when forcing a reload of the page?

[ghajini]

i don't see even when forcing reload of the page
i checked with firefox android 132.0 ,firefox android nightly 134.0a1

[gorhill]

With Firefox 128, it became possible to inject the scriptlets directly into the MAIN world, so the solution is probably to avoid going through a blob for Firefox 128+.

[uBlock-user]

it became possible to inject the scriptlets directly into the MAIN world

So a website CSP no longer gets applied on uBO's scriptlets ? Because this was the reason the blob: workaround had to be implemented for Firefox.

[ghajini]

i want to note the fact that this issue only happens on firefox android browser & NOT on firefox desktop browser/chrome

[gorhill]

I could reproduce on Firefox desktop.