Level 1

20 points

Safari 4.0.3 Crashed by Javascript?

Since the recent slew of updates, Safari has started bugging out when I visit several of my favourite sites. I can't post crash logs as none are showing up in console. Safari just becomes unresponsive. The spinning progress wheel in the toolbar stops and then the beachball of doom appears. I've looked around the discussions and tried all the usual tricks. (disk and permissions repairs, resetting Safari, clearing caches and cookies etc.) The only thing that has restored some degree of stability is disabling Javascript. It appears that the freezes are related to syndicated adverts in the pages that cause them.
Notables have been
http://www.tuaw.com/
http://www.macosxhints.com/
My point, and why I am posting here, is that loading the same pages in Omniweb or Firefox, the adverts that appear to be the source of the Safari freezes simply fail to load, but the html content loads OK and the browsers remain responsive and usable.
Can anyone suggest what I may have done wrong, if anything and any solution to this.
It's a shame. I'd fallen in love with Safari again since the 4 update, and am now, born of frustration with these constant freezes, stuck with half a browser (Safari, no javascript support) or giving up and going back to Omniweb. (this is no slight on Omniweb, which is still a great product)

MBP SR 17", PB G4 17" 1.67, iLamp iMac, Mac OS X (10.4.11)

Posted on Aug 16, 2009 4:11 AM

35 replies

Aug 17, 2009 6:05 AM in response to Pilster

Is this just a massive security vulnerability

It's not a security vulnerability or a JavaScript issue. Those empty files and folders are being downloaded automatically because JavaScript is enabled, and the domain of the company that's doing it is not blocked. If you download Hostal and use it to add odb.outbrain.com to the list of blocked domains in your Hosts file, you won't get those anymore.

Aug 17, 2009 6:08 AM in response to Pilster

There's something wrong with the JavaScript frameworks, as I posted earlier. The only solution is an
Archive & Install like I suggested earlier.

Pilster Author

Level 1

20 points

Aug 17, 2009 6:25 AM in response to Golden Shoes

Thanks again Golden Shoes. I will do an archive and install, but am aware that having read the KB article you pointed me to, I'll probably have to also install all my non apple software again, so it will have to wait until no work is pressing.
Any idea, from the crash log, as to where I went wrong with the frameworks?
On an aside, I'm not sure I can agree that the download issue raised elsewhere in this thread is "not a security vulnerability". That a website I visit can install files and folders on my hard drive with NO interaction from me! I would say that that is almost the definition of a security vulnerability. I know that the ones shown are harmless, but isn't this in essence a proof of concept that files, benign or malicious, can be inserted in this way? Just my thoughts!
Thanks once again for your time and I'll keep you posted as to the results of the archive and install.

Aug 17, 2009 6:33 AM in response to Pilster

I will do an archive and install, but am aware that having read the KB article you pointed me to, I'll probably have to also install all my non apple software again

That's incorrect. Archive & Install with the Preserve Users and Network Settings option only replaces the OS; all your programs, accounts, settings, etc., are untouched.

Any idea, from the crash log, as to where I went wrong with the frameworks?

You didn't go wrong, something on the Mac did, but it's anyone's guess as to when or exactly what, since we're dealing with well over 130,000 files, most of them invisible. Stuff happens, which is why it's advisable for everyone to have a full, bootable backup of their current system at all times.

That a website I visit can install files and folders on my hard drive with NO interaction from me! I would say that that is almost the definition of a security vulnerability.

This is nothing new; it's always been possible to do this with JavaScript, and JavaScript is a security risk. But the fact remains that even if something can be downloaded, it can't be run or installed without you providing the admin password.

Pilster Author

Level 1

20 points

Aug 17, 2009 6:41 AM in response to Golden Shoes

From the KB article
"Important: Usually it's best to reinstall third-party software after an Archive and Install installation to ensure they work correctly. The "Preserve Users and Network Settings" option leaves non-Apple-installed (third-party) items intact, though they may be moved, depending on their location."

It's the Adobe Creative Suite that concerns me most. Any idea whether this will require to be reinstalled and then patched up to date?

Aug 17, 2009 6:56 AM in response to Pilster

It's the Adobe Creative Suite that concerns me most. Any idea whether this will require to be reinstalled and then patched up to date?

I've never had to do it. Unless something is in the wrong place to begin with, it will be ignored.

TildeBee

Level 7

31,923 points

Aug 17, 2009 6:53 AM in response to Pilster

Pilster --

This is happening a lot to Tiger users who have done the latest update.
From what I know so far, an Archive and Install may not fix the strange download files.
I would just hold off until the Hosts look into this documented situation further.

Maybe use Firefox for a while, and stay tuned.

Pilster Author

Level 1

20 points

Aug 17, 2009 6:53 AM in response to Golden Shoes

Good. Now, a complete back up and then to seize the bull by the proverbial 'horns'. Gulp.
Thanks again for all your time.
Best and wish me luck.

Pilster Author

Level 1

20 points

Aug 17, 2009 7:03 AM in response to TildeBee

'k. Feeling a bit dim right now. I had gathered that us Tiger users were having some issues with the 4.0.3. I'll hold fire on the AAI as advised. It is after all only Safari that's problematic.
Chin Chin

Aug 17, 2009 7:08 AM in response to Pilster

There's no reason to hold off on the Archive & Install. The issue with some people experiencing strange downloaded files has nothing to do with this, and I've already documented how to stop that.

The Hosts aren't investigating anything; it's not their job. Only Apple engineers can investigate a real or perceived software issue.

TildeBee

Level 7

31,923 points

Aug 17, 2009 8:19 AM in response to Golden Shoes

We have differing opinions, GS.
And you have no idea what communications
I and others have had with the Hosts.

Aug 17, 2009 8:39 AM in response to Golden Shoes

It is often the function of the Hosts to escalate an issue, and I believe this is likely already escalated, but of course am never informed of such. But those of us who are Level 4 or higher do have a good understanding of how the chain of reporting works.

Pro apps would probably best be freshly installed after an A&I, so I perfectly understand anyone's reluctance to proceed there unnecessarily. I for one would apply the Combo Update over the existing system before doing an A&I, but as yet I am not recommending that either. But I am in a position to test that if time allows.

Ernie

Aug 17, 2009 8:48 AM in response to Ernie Stamper

I'm sure the Hosts can escalate something, but the previous statement that they are investigating something is just not true. If I wanted to escalate someting, I can just send an email to the engineers, since I have their email address. But if I were to post that, it would surely be removed, anyway.

TildeBee

Level 7

31,923 points

Aug 17, 2009 9:38 AM in response to Golden Shoes

Great!
Why don't you email them, and let us know their response?

Pilster Author

Level 1

20 points

Aug 17, 2009 10:22 AM in response to TildeBee

I have often thought that the ability for us 'umble users to be able to contact apple techie types direct is sadly lacking, but do understand that the inbox on that account would be a complete nightmare!
What i intend to do is order the 10.5 upgrade and bite the bullet. I ask for some collective gems of wisdom here, from all of the good people who have tried to help.
Upgrade Clean install or
Archive and install or
wipe the MBP (after backup o' course)
Which of these is likely to be least problematic and will this overwrite any of the Javascript framework that is apparently playing me up. I don't want to cough £90 for the upgrade and find it solves nothing.
Tools of the trade are the Adobe comfort zone (CS3), so any words of wisdom regarding this upgrade and things to keep all my apps happy deeply appreciated.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Safari 4.0.3 Crashed by Javascript?