Search found 3 matches

by Skai
Wed Sep 18, 2013 11:05 am
Forum: NoScript Support
Topic: XSS on YouTube
Replies: 45
Views: 19665

Re: XSS on YouTube

https://www.youtube.com/watch?feature=player_embedded&v=Gzn6E2m3otg triggers it. So does every other video as far as I know. It triggers instantly when Firefox is in fullscreen, otherwise only when you scroll down far enough to see the comments, I believe. I do not see any lost functionality wi...
by Skai
Wed Sep 18, 2013 8:51 am
Forum: NoScript Support
Topic: XSS on YouTube
Replies: 45
Views: 19665

Re: XSS on YouTube

Nice catch, there are three (well, four, but two are duplicates about deprecated method) notifications when filtering with NoScript and all of them disappear almost instantly, having less than second to copy them. Timestamp: 18.9.2013 11:43:37 Warning: nsIJSON.decode is deprecated. Please use JSON.p...
by Skai
Wed Sep 18, 2013 7:11 am
Forum: NoScript Support
Topic: XSS on YouTube
Replies: 45
Views: 19665

Re: XSS on YouTube

I just registered to confirm this. I cannot find anything questionable in sources or any information in console. Doesn't matter if I am logged in or running in private browsing mode either, any video triggers this as far as I know. Edit: It doesn't trigger straight away if you open YouTube in small ...