[Answered] What happened with NoScript json options xssBlockUnscannedPOST and xssScanRequestBody

Post a reply

Smilies
:D :) ;) :( :o :shock: :? 8-) :lol: :x :P :oops: :cry: :evil: :twisted: :roll: :!: :?: :idea: :arrow: :| :mrgreen: :geek: :ugeek:

BBCode is ON
[img] is ON
[url] is ON
Smilies are ON

Topic review
   

Expand view Topic review: [Answered] What happened with NoScript json options xssBlockUnscannedPOST and xssScanRequestBody

Re: Asking about NoScript json options xssBlockUnscannedPOST and xssScanRequestBody

by pal1000 » Fri Jun 14, 2019 7:49 pm

Thanks both for answering. It looks like my guess was right. I marked this question topic as answered.

Re: Asking about NoScript json options xssBlockUnscannedPOST and xssScanRequestBody

by Giorgio Maone » Fri Jun 14, 2019 3:16 pm

musonius wrote: Fri Jun 14, 2019 1:06 pm
pal1000 wrote: Fri Jun 14, 2019 10:54 am Could it be those options were related to the workaround for https://bugzil.la/1532530 that was nuked in 10.6.2 stable? If so do they still have some effect if left alone?
After looking at the commit which removed the workaround, I am quite sure that these options don't have any effect anymore.
No, they don't indeed.

Re: Asking about NoScript json options xssBlockUnscannedPOST and xssScanRequestBody

by musonius » Fri Jun 14, 2019 1:06 pm

pal1000 wrote: Fri Jun 14, 2019 10:54 am Could it be those options were related to the workaround for https://bugzil.la/1532530 that was nuked in 10.6.2 stable? If so do they still have some effect if left alone?
After looking at the commit which removed the workaround, I am quite sure that these options don't have any effect anymore.

[Answered] What happened with NoScript json options xssBlockUnscannedPOST and xssScanRequestBody

by pal1000 » Fri Jun 14, 2019 10:54 am

I have a relatively old noscript_data.txt from 10.6.2 release candidates period backed up with these 2 options: xssScanRequestBody is true and xssBlockUnscannedPOST is false.
I also noticed that a fresh copy of Noscript 10.6.3rc7 doesn't create these options in its configuration json anymore and there is no UI element in NoScript Options page that could set them. If I remember well there were UI elements that controlled those options in 10.6.2 release candidates. Could it be those options were related to the workaround for https://bugzil.la/1532530 that was nuked in 10.6.2 stable? If so do they still have some effect if left alone?

Top