SO used to work fine without any Google cruft. Lately it keeps nagging that some cross-domain JS it can't load, and bunches of controls are borked.
When I enable Google cruft that's denied on purpose, it all works. If SO could work without Google until recently, why do they demand Google now?
Google routinely uses data in evil ways, always striving for more evil ways to use it, and that should not be forced on everyone. Is that what SO wants to promote? Nefarious user-hostile data usage? I sure hope not.
EDIT I'm using FireFox v107.0.1, which I haven't updated because when I updated to v107 it utterly boned everything, as if I'd installed FF on a new machine for the first time, even though it's updated reasonably well for years. I'm not in a hurry to discover if Mozilla is going do that to me again.
I use NoScript & Ghostery, and google is not enabled anywhere by default because like doubleclick they're everywhere and don't have the right to see what I'm doing on the 'net. I only enable google when I'm doing things AT google, or when some payment processor is once again using their "captcha" thing to "prove I'm not a bot", mostly. It used to be SO would load fine even with google disabled, or that's my recollection, where "used to be" is some nebulous number of months that I ignored the "requires external JavaScript" warning.
I also didn't specifically mean to be on "meta", when I clicked the feedback link it came here, but pretty much anything that's related to SO produces exactly the same warning banner. I'd expect that and consider the actual site to be less relevant than the perceived change across all SO-land.
The borkt things appear to be anything that doesn't display a link in the status bar when I hover on it, ie, they're using JS. That's at least the up/down votes & bookmark, but likely others. I didn't exhaustively hover on everything to find out, nor did I exhaustively click things to see what happened. Today I specifically only clicked bookmark as an innocuous test, once I started enabling things so they might do something.
When I loaded this page now, stackoverflow.com is already on the allowed list, and "googletagmanager" is not allowed. No other sites appear. In particular "googletagmanager" is a primary means google spies on me that I normally have completely blocked across the board, but I do allow it today for the sake of providing additional data. The controls are still borkt. I go to Ghostery and tell it to allow Google Tag Manager to invade my privacy, and now the controls at least demonstrate stickiness, in that when I click bookmark for example that becomes highlighted. I also now see "ajax.googleapis.com" in the NoScript list, but I didn't see if the first NoScript change or the Ghostery change made that appear. I suspect the former.
If SO only demanded ajax.googleapis.com up front I would have enabled that on NoScript, reloaded the page, and not mentioned a thing. I know peeps use them for CDN-style things, and while that's not in the default allow list, and I don't prefer it, I often do enable ajax.googleapis.com on sites where I care.
The problem is I have to allow a site that I specifically ban, googetagmanager, in order to properly use SO, or so it seems based on this and "recent" prior page loading, because I don't see ajax.googlapis.com until I allow the nefarious activity. That's the change. I could just allow ajax.googlapis.com all the time, but that allows google to track me on each site that tries to load anything from there, which is way more stuff than some simple CDN-like button click JS or jQuery, so I don't enable it until I feel it's necessary.
ajax.googleapis.com
? What controls are borked exactly? What browser, incl. version, do you use (sometimes changes to those cause problems)?ajax.googleapis.com
(I can't reproduce the problem with it enabled)—though the devil may be in the details. Whenever I set up a new Firefox "profile", I enable only what is required, directed by getting log on and voting on Stack Exchange to work. If I remember correctly,ajax.googleapis.com
is required for that.sstatic.net
(at least here on MSO). Perhaps it is only for some initial actions, like log in?)googletagmanager.com
at other levels, e.g., by adding it to the 'hosts' file (using whatever the exact domain name is),127.0.0.1 googletagmanager.com
, like forfacebook.com
,www.facebook.com
,static.ak.facebook.com
,connect.facebook.net
,badge.facebook.com
, etc. It works on both Windows and Linux.)