InformAction Forums

barbaz wrote:Oh, this - viewtopic.php?f=19&t=21795

Yes.

Sorry, I'm not making sense of that. Sorry if I'm confused and/or confusing. It's been some time since my reading on malware and extensions. My simplified belief, I thought malware could piggy back on legitimate extensions thus the movement to WebExtensions? I thought WebExtensions would help in mi...

I know I'm sounding paranoid now, but if I reinstall an older version, isn't this, in part anyway, what was driving WebExtensions? I haven't installed any new extensions in years. I've used the extensions internal updaters only.

I deleted the value and tried to log in and got the error again.

When you say blank out, do you mean leave the value empty of code?

barbaz, on the account that I've not upgraded to V5, is there any harm in not upgrading?

Has V5 forked towards WebExtensions? I've read some about it awhile ago.

Sorry. Noop.

barbaz wrote:Is it possible to reproduce the problem without login and without entering random invalid credentials?
If so, can you please share the link to the site?

No it won't reproduce without log on. Sorry.

The google-analytics surrogate script was changed in 5.0. Does it work with NoScript 5.x if you replace about:config > noscript.surrogate.ga.replacement with its value from NoScript 2.9.5.3? No. I changed the value for noscript.surrogate.ga.replacement in V 5 to the 2.9.5.3 version. Got the same er...

Good Afternoon, I am wondering. I just updated Fx ESR and NoScript from 2.x to 5.x on two user accounts. I didn't update NoScript, just Fx on a third account and was able to securely log onto a site without problem. On the other that was updated to Ver 5.x, initially I got an error, unable to access...

I could be wrong about this question or idea. XSS can be an issue when utilizing payment links within a website. I gather the link could be malicious and send payment info to someone other than you'd wish. Would element properties 8 assist in determining the link itself? Element Properties 8 My unde...

Thank you both for your assistance. I feel much more secure now. Just so I understand the sequence of this occurrance. When I visited the site and noscript flagged the XSS and wouldn't allow me to log in, no script was identifying the XSS vulnerability in the site's code (correct?). Then, in order t...

barbaz,
That seemed to do the trick. Thank you.
Now what exactly does this code in ABE protect me from?

regards,planet222

Thrawn,
I was possibly editing my last post, now on page 1, when you posted. I saw another url in the log and tried something else but it didn't work.

What will entering the url 3 times do?

planet222

No good, get the same error on the site as above. Here's the newest log. There is another url in the log that I think I cut out of the last one accidentally: [21:18:18.184] [ABE] <.mortgagequestions.com> Anonymize GET on {GET https://www.c.mortgagequestions.com/siteminderagent/SmMakeCookie.ccc?SMSES...