Search found 5 matches

by kwiniec
Mon Apr 17, 2023 1:51 pm
Forum: NoScript Support
Topic: [NoScript Classic] XSS false positives on wikipedia (split from t=26968)
Replies: 2
Views: 1529

Re: [NoScript Classic] XSS false positives on wikipedia (split from t=26968)

Works!  Thank you!  Now to see if I can figure out why it is necessary....
by kwiniec
Sun Apr 16, 2023 6:26 pm
Forum: NoScript Support
Topic: [NoScript Classic] XSS false positives on wikipedia (split from t=26968)
Replies: 2
Views: 1529

[NoScript Classic] XSS false positives on wikipedia (split from t=26968)

Like BardRT, 100% repeatably, the Wikipedia URL https://en.wikipedia.org/wiki/Lockwood_%26_Co._%28TV_series%29 works, but then when I try to append ?useskin=vector NoScript changes the URL to https://en.wikipedia.org/wiki/Lockwood_&_Co._%20TV_series%20?useskin=vector#07076675208486105782 most no...
by kwiniec
Fri Sep 18, 2009 7:45 pm
Forum: NoScript Development
Topic: bug: noscript.untrusted
Replies: 4
Views: 2867

Re: bug: noscript.untrusted

Then the strange thing is that it work before restart. Indeed. In fact, upon retesting, I see the status bar icon does not indicate javascript is being blocked even though it is. Because of legacy issues with Mozilla code, a 2nd level domain entry matches its subdomains but not itself, unless the v...
by kwiniec
Fri Sep 18, 2009 2:57 pm
Forum: NoScript Development
Topic: bug: noscript.untrusted
Replies: 4
Views: 2867

Re: bug: noscript.untrusted

Do you edit the preference manually from about:config?
Yes.
Does it change after browser restart?
No, the string does not change.
by kwiniec
Thu Sep 17, 2009 10:56 pm
Forum: NoScript Development
Topic: bug: noscript.untrusted
Replies: 4
Views: 2867

bug: noscript.untrusted

I think I found a bug. When I set noscript.untrusted to a second-level domain of the form foo.bar and then vist URLs of the form http://foo.bar or http://www.foo.bar ("blacklist mode"), javascript is ignored as expected. But when I restart the browser and then vist those URLs, javascript i...