InformAction Forums

I just installed the new fix and made a purchase on eBay UK, and it worked for me too - no error messages either from eBay to PayPal or from PayPal to eBay. Thank you!

@barbaz Thank you so much for all your investigation into this, and to Rom623 for reporting it. I do hope Giorgio will get time to confirm that it's definitely a false positive, and hopefully make a fix to accommodate whatever's causing it. Thanks again.

@ Rom623 Unfortunately the latest NoScript update didn't fix this particular issue, I just tested it by trying to buy something on eBay and still got the XSS warning pop-up. I did buy an item on eBay on 30 June because of urgent need and decided I'd have to take the chance: that went through OK and ...

Unfortunately I didn't save the text from that side of the transaction, just took a screenshot, so can't run it through the inspect console. From what I see of the alpha & numeric characters within the curly brackets (the text gets cut off on the right side), some of them are the same as in the ...

Hoping this is indeed a false positive, I took a chance on allowing my purchase through, which is just a small item but needed quickly and can't get anywhere else. When I got transferred to PayPal, I got the same NoScript XSS warning but in reverse, saying there was suspicious data being sent from P...

Being curious about the triple brackets thing, I did some googling and found that they are used in Javascript and in phtml for defining templates. {{ }} = 'Interpolate (escaped)', {{{ }}} = 'Interpolate (unescaped)'. I don't know what those two terms mean - do they make sense to you? Eg: https://cod...

Thanks for running those tests! Am unfortunately not Javascript-savvy: what do the three brackets around the data, which NoScript doesn't like, do? Can NoScript be modified to parse them, if they're causing a false positive (if that's what it is)?

Thank you for the quick reply! The paymentinstrumentid is NOT all numbers, it's a mixture of numbers and letters (and not hexadecimal numbers, it contains letters P and R), so that may be worrying?

Hello, I'm the eBay member the original poster quoted from the eBayUK community forum, I happened across this thread while googling for any info I could find on the problem. If you look at my thread over there again, you can see there hasn't been any interest from eBay community staff, just a couple...