InformAction Forums

Thanks for your reply. Currently, I don't have the option of using something other than HTML for this string, but I may be able to so in the future, so thanks for the suggestion. You say that passing HTML is unwise - true enough, but evidently NoScript's XSS protection lets through at least some amo...

To elaborate: Here's the original part of the string that caused the problem: "<br /><br /> Some words with spaces between them." I changed this part of the string, with varying results. "abcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyz" --> works, so it can't be just the num...

Hello forum, in the FAQ for the Anti-XSS feature, it says: Cross-site requests from a trusted site to a different trusted site are checked through the InjectionChecker engine, which is more accurate and sanitizes only requests which contain conspicuous fragments of HTML or syntactically valid JavaSc...