InformAction Forums

NoScripters and WebSec nerds of all lands, unite!
https://forums.informaction.com/

More ABE issues with banks

https://forums.informaction.com/viewtopic.php?t=24570

Page 1 of 2

More ABE issues with banks

Posted: Mon Feb 19, 2018 6:30 am
by lakrsrool
I need more ABE fixes for a second way I am now accessing these banks (2nd method, I use two methods now page).

Union Bank ABE error:
Image
It looks like this image got cut-off -- here it is again for another try:
Imagethe remainder is getting cut-off at the ".bankingsso.unio...." it is ".bankingsso.unionbank.com> deny"

Citibank ABE error:
Image (I would just copy/paste the message banner info but the message can't be copied from the NoScript banner so an image is necessary).

What do I need to have entered in ABE for these two ways to log-in to these two banks (Union Band and Citibank) to work in NoScript?

Thanks

Re: More ABE issues with banks

Posted: Mon Feb 19, 2018 2:12 pm
by fatboy
> the message can't be copied
userChrome.css

Code: Select all

/* for SeaMonkey */
/* @-moz-document url(chrome://navigator/content/navigator.xul) { */
/* for Firefox (perhaps, will be suitable also for PaleMoon) */
@-moz-document url(chrome://browser/content/browser.xul) {
description{-moz-user-select: text !important; -moz-user-focus: normal !important}
}
@-moz-document url(chrome://global/content/commonDialog.xul) {
dialog{-moz-user-select: text !important; -moz-user-focus: normal !important}
}

Re: More ABE issues with banks

Posted: Mon Feb 19, 2018 5:10 pm
by lakrsrool
Thanks fatboy, it does work with Pale Moon as well which is what I use. Image

Union Bank ABE Error Banner problem: "Request {GET https://sso.unionbank.com/obc/forms/login.fcc <<< file:///C:/Users/user/Documents/my-start-webpage_files/Pale%20Moon%20start-page%20plus.html - 6} filtered by ABE: <.sso.unionbank.com .bankingsso.unionbank.com> Deny"

Citibank ABE Error Banner problem: "Request {GET https://online.citi.com/US/JPS/portal/Index.do?Promo_ID=SPBL <<< https://online.citi.com/US/JPS/portal/Index.do?Promo_ID=SPBL, file:///C:/Users/user/Documents/my-start-webpage_files/Pale%20Moon%20start-page%20plus.html - 6} filtered by ABE: <.online.citi.com> Deny"

I've added an additional way to access Banks (via my own resident HTML bookmark page that starts in conjunction with start.me since Start.me has messed up everything with a very problematic in many ways "2018 upgrade" that required me to reduce the start.me start-page by more than 50% which precluded my writing my own adjacent start-page for the large number of bookmarks removed from the new start.me "2018 upgrade" page that worked fine "pre-2018 upgrade" but is now needed to get the page-load time down to less than 30 seconds among many other issues as well with the new start.me disastrous "2018 upgrade") so therefore need additional ABE rules for these links (that I can never figure out myself).

Hoping to hear from barbaz regarding this.... ;)

Re: More ABE issues with banks

Posted: Mon Feb 19, 2018 5:12 pm
by barbaz
Try adding file: to the Accept lines that had start.me in them.

Re: More ABE issues with banks

Posted: Mon Feb 19, 2018 5:26 pm
by lakrsrool
Hi barbaz, glad to hear from you....

This is what I've tried.

For Union Bank:
#Pale Moon bookmarks
Site .sso.unionbank.com .bankingsso.unionbank.com
Accept from .unionbank.com
Deny INCLUSION
Accept from file:///Users/user/Documents/my-start-page_files/* .sso.unionbank.com .bankingsso.unionbank.com
Deny

For Citibank:
#Pale Moon bookmarks
Site .online.citi.com
Accept from .citi.com
Deny INC
Accept from file:///Users/user/Documents/my-start-page_files/* https://palemoon.start.me/* https://rewards.thankyou.com/*
Deny

Neither work :cry: .....

I also need an ABE rule for this URL as well: "Request {GET https://accountonline.citi.com/cards/svc/LoginGet.do <<< file:///C:/Users/user/Documents/my-start-webpage_files/Pale%20Moon%20start-page%20plus.html - 6} filtered by ABE: <.citi.com> Deny"

These ARE the ABE problems I've found so far using my Bookmark page....

Re: More ABE issues with banks

Posted: Mon Feb 19, 2018 5:30 pm
by barbaz
Just use literally

Code: Select all

file:
lakrsrool wrote:I also need an ABE rule for this URL as well:
Please post the ABE message from the Browser Console (Ctrl-Shift-J). The notification isn't complete information.

Re: More ABE issues with banks

Posted: Mon Feb 19, 2018 6:35 pm
by lakrsrool
barbaz wrote:Just use literally

Code: Select all

file:
I'm lost as far as what you mean by this....
barbaz wrote:
lakrsrool wrote:I also need an ABE rule for this URL as well:
Please post the ABE message from the Browser Console (Ctrl-Shift-J). The notification isn't complete information.

Code: Select all

[ABE] < .citi.com> Deny on {GET https://accountonline.citi.com/cards/svc/LoginGet.do <<< file:///C:/Users/user/Documents/my-start-webpage_files/Pale%20Moon%20start-page%20plus.html - 6}
CITIBANK rule:
Site .citi.com
Accept from .citi.com
Deny INCLUSION
Accept from .citi.com https://start.me/* https://palemoon.start.me/* https://citi.com/*
Deny

Re: More ABE issues with banks

Posted: Mon Feb 19, 2018 6:38 pm
by lakrsrool
Here are the browser console ABE error messages for the other two bank URL logins (I didn't know the NoScript ABE message banner is incomplete):

CITIBANK LOGIN:

Code: Select all

[ABE] < .online.citi.com> Deny on {GET https://online.citi.com/US/JPS/portal/Index.do?Promo_ID=SPBL <<< file:///C:/Users/user/Documents/my-start-webpage_files/Pale%20Moon%20start-page%20plus.html - 6}
CITIBANK rule:
Site .online.citi.com
Accept from .citi.com
Deny INCLUSION
Accept from file:///Users/user/Documents/my-start-page_files/* https://palemoon.start.me/* https://rewards.thankyou.com/*
Deny
UNION BANK LOGIN

Code: Select all

[ABE] < .sso.unionbank.com .bankingsso.unionbank.com> Deny on {GET https://sso.unionbank.com/obc/forms/login.fcc <<< file:///C:/Users/user/Documents/my-start-webpage_files/Pale%20Moon%20start-page%20plus.html - 6}
UNIONBANK rule:
Site .sso.unionbank.com .bankingsso.unionbank.com
Accept from .unionbank.com
Deny INCLUSION
Accept from https://palemoon.start.me/* .unionbank.com
Deny

Re: More ABE issues with banks

Posted: Mon Feb 19, 2018 6:38 pm
by barbaz
I mean change your rule like this -

Code: Select all

Site .citi.com
Accept from .citi.com
Deny INCLUSION
Accept from .citi.com https://start.me/* https://palemoon.start.me/* https://citi.com/* file:
Deny
For Union Bank:

Code: Select all

#Pale Moon bookmarks
Site .sso.unionbank.com .bankingsso.unionbank.com
Accept from .unionbank.com
Deny INCLUSION
Accept from file: .sso.unionbank.com .bankingsso.unionbank.com
Deny
For Citibank:

Code: Select all

#Pale Moon bookmarks
Site .online.citi.com
Accept from .citi.com
Deny INC
Accept from file: https://palemoon.start.me/* https://rewards.thankyou.com/*
Deny
Clear now? :)

Re: More ABE issues with banks

Posted: Mon Feb 19, 2018 6:57 pm
by lakrsrool
Thanks barbaz,

Two of the three ABE rules worked (the two Citibank worked).

The Union Bank still gets an ABE error (see below).

I have no idea how and why they work or don't --- tried a few things with Union Bank but with my total non-knowledge on this didn't get any where.

UNION BANK:

Code: Select all

[ABE] < .sso.unionbank.com .bankingsso.unionbank.com> Deny on {GET https://sso.unionbank.com/obc/forms/login.fcc <<< file:///C:/Users/user/Documents/my-start-webpage_files/Pale%20Moon%20start-page%20plus.html - 6}
UNIONBANK rule:
Site .sso.unionbank.com .bankingsso.unionbank.com
Accept from .unionbank.com
Deny INCLUSION
Accept from https://palemoon.start.me/* .unionbank.com
Deny
[ABE] < .sso.unionbank.com .bankingsso.unionbank.com> Deny on {GET https://sso.unionbank.com/obc/forms/login.fcc <<< file:///C:/Users/user/Documents/my-start-webpage_files/Pale%20Moon%20start-page%20plus.html - 6}
UNIONBANK rule:
Site .sso.unionbank.com .bankingsso.unionbank.com
Accept from .unionbank.com
Deny INCLUSION
Accept from https://palemoon.start.me/* .unionbank.com
Deny

Re: More ABE issues with banks

Posted: Mon Feb 19, 2018 7:00 pm
by barbaz
That one is still missing file: in this Accept line -

Code: Select all

Accept from https://palemoon.start.me/* .unionbank.com

Re: More ABE issues with banks

Posted: Mon Feb 19, 2018 7:28 pm
by lakrsrool
I was using "file:" in the accept line for the rules you posted but I had a previous rule from before for the start.me page link.

So I added the "file:" to the former rule-set as well (first below) and both the start.me page and new bookmark page I wrote work now. Image (this "file:" thingy is something new that appears to help things work for my new Bookmark page and doesn't make a difference either way for rule-sets that formerly worked on start.me page (first rule-set) --- I guess ABE was doing the first rule-set when I used the Bookmark page and not getting to the second rule-set thus the ABE error).

Code: Select all

# version 5.0.6 to 5.0.7.1
Site .sso.unionbank.com .bankingsso.unionbank.com
Accept from .unionbank.com
Deny INCLUSION
Accept from file: https://palemoon.start.me/* .unionbank.com
Deny

#Pale Moon bookmarks
Site .sso.unionbank.com .bankingsso.unionbank.com
Accept from .unionbank.com
Deny INCLUSION
Accept from file: .sso.unionbank.com .bankingsso.unionbank.com file:
Deny
Once again many thanks for all the help barbaz.Image

Re: More ABE issues with banks

Posted: Mon Feb 19, 2018 7:30 pm
by barbaz
You're welcome! Image

Re: More ABE issues with banks

Posted: Wed Apr 25, 2018 3:22 pm
by lakrsrool
I'm having problems with ABE regarding Citibank again --- since updating to NoScript 5.1.8.5 if I'm not mistaken....

What is odd is that it only fails ABE on the first attempt for the day -- after that I do not have any problem with ABE -- I can log-in all day long until the next day when I will once again get the ABE error on the first attempt of the day to log-in again and so on....

ABE error:

Code: Select all

Request {GET https://online.citi.com/US/JPS/portal/Index.do?Promo_ID=SPBL <<< https://online.citi.com/US/JPS/portal/Index.do?Promo_ID=SPBL, https://palemoon.start.me/p/wMdAl7/pale-moon-start-page - 6} filtered by ABE: <online.citi.com> Deny
What I currently have:

Code: Select all

Site online.citi.com
Accept from .citi.com
Deny INC
Accept from https://online.citibank.com/* https://accountonline.citi.com/cards/svc/BTNext.do* https://online.citi.com/US/JPS/portal/Index.do?Promo_ID=SPBL https://palemoon.start.me/* 
Deny

#https://online.citi.com/US/JPS/portal/Home.do
Site online.citi.com
Accept from .citi.com
Deny INC
Accept from https://online.citibank.com/* https://accountonline.citi.com/cards/svc/BTNext.do* https://online.citi.com/US/JPS/portal/Index.do?Promo_ID=SPBL https://palemoon.start.me/* 
Deny

#work in v5.0.6 and up to v5.0.7.1
#https://online.citi.com/US/JPS/portal/Index.do?Promo_ID=SPBL
Site .online.citi.com
Accept from .citi.com
Deny INC
Accept from file:///Users/user/Documents/my-start-page_files/* https://palemoon.start.me/* https://rewards.thankyou.com/*


#Pale Moon bookmarks
#Site .online.citi.com
#Accept from .citi.com
#Deny INC
#Accept from file: https://palemoon.start.me/* https://rewards.thankyou.com/*
#Deny

#Pale Moon bookmarks
Site .citi.com
Accept from .citi.com
Deny INCLUSION
Accept from .citi.com https://start.me/* https://palemoon.start.me/* https://citi.com/* file:
Deny

#Credit cards
Site .citi.com
Accept from .citi.com
Deny INC
Accept from .citi.com https://start.me/* https://palemoon.start.me/* https://citi.com/*
Deny

Re: More ABE issues with banks

Posted: Wed Apr 25, 2018 3:25 pm
by barbaz
The ABE notification isn't complete information. Can you please post the message from ABE in the Browser Console (Ctrl-Shift-J) when this issue occurs?
All times are UTC
Page 1 of 2

Powered by phpBB® Forum Software © phpBB Limited