InformAction Forums

This RegEx script posted by barbaz 15th Oct worked for me:

barbaz wrote:try this...

Code: Select all

^@https://(?:[^/:]+\.)?anz\.com(?:\.au)?/

(allow *all* of anz.com & anz.com.au to XSS any site)

I'm assuming that ANZ is not alone in using this type of coding if the other NS users that have had similar problems are anything to judge by.

Installed v2.6.9.39rc1 - no change
Added first RegEx - no change
Removed first RegEx and added second one - Success!

Many thanks, we can now log on without any hint of a hang!

Done. Edited previous post.

perhaps therube has "Full Domains" checked Yes, I did do that, so I could find, see, ###.anz.com, & then not allow (or blacklist) it. I've always just had Base 2nd level domains selected because I understood that it just shortened displayed addresses by leaving off the "http://ww...

Thrawn wrote:I still can't reproduce the hang here. Temp-allowed anz.com and demdex.net, but marked omtrdc.net as untrusted. Loads without any trouble.

It'll load, but the hang occurs when you attempt to enter a Customer Registration Number, or in my case, simply place the cursor over that window.

-waf1x.anz.com is definitely instrumental in the hang. When I go to anz.com.au (with XSS disabled) NoScript only lists: -qualtrics.com -liveperson.net -demdex.net +anz.com.au When I go to the logon page (with XSS disabled) NoScript lists: -demdex.com -omtrdc.net +anz.com but no sign of: waf1x.anz.c...

therube wrote:So maybe ? you'll be OK with blacklisting: -waf1x.anz.com ?

I'll try that later today and see if we can log in. Thanks for digging down into this problem.

therube wrote:about:crashes, last few related crash report URLs ?

You're right, it was hanging, not crashing! Sorry for misleading everyone, didn't know crash reports are stored for later perusal.

barbaz wrote:the sticky in NS Support viewtopic.php?f=7&t=17774 and (if you don't know regular expressions) this tutorial

Thanks for those links

I've disabled XSS and, yes it does stop the crash. I see that there is a list of Anti-XSS Protection Exceptions, but I am quite hopeless at writing RegExp's. Are there some instructions somewhere that decode the hieroglyphics? I've tried with Mailwasher's RegExp's and get some pretty weird results (...

Merge is good, thanks. So to disable XSS do I just un-tick both "Sanitize cross-site..." and "Turn cross-site POST..."? If so, I haven't done that because I don't understand the implications for all the other sites we use. If not, where do I do that? Oops! ABP is actually AdBlock...

I've started a new topic so as not to hijack this one... https://forums.informaction.com/viewtopic.php?f=10&t=21325 To answer your question: On the two PCs I've tried, it is a permanent crash of FireFox which can only be prevented by disabling NoScript. That's disabling it in tools/extensions, n...

In our house, I'm in charge of cooking and IT and my wife is the social and finance manager, among many other things. She has recently reported to me that she could not easily access our online banking at www.anz.com.au and I have confirmed that. Unfortunately, I have not been able to rectify the si...

Having the same problem with anz.com.au (and anz.com) - their 'log on' button opens another page where you enter your user name and password. If you even just place the cursor anywhere over the new page, Firefox completely locks up. The only way I have found around the problem is to totally disable ...