InformAction Forums

enter url
https://pricespy.co.uk/product.php?p=2835536
or search for: HP 932XL (Black) + 933XL (Cyan/Magenta/Yellow)
FF stalls and must be closed using the red X button.
No problem when the Noscript addon is disabled.
The problem is reproducible on another machine

Can anyone reproduce this?

Feel free to periodically check on the bank in your regular profile to see whether they've picked up their game. Thanks that works fine. Much better. Having got used to using the bank profile old habits die hard. What are the chances of a passive feature that indicates the site has an XSS liability...

That's why we suggested using a separate profile. But yes, it's the bank's mistake. Now this is confusing. I am using a seperate profile but as soon as I install NoScript and allow the website the problem occurs. Yes I could turn off the XSS feature and live happily ever after but I prefer to know ...

therube wrote:Well, broadly, you could disable; NoScript | Options | Advanced -> XSS => Sanitize... & Turn... (uncheck).

Yes, that works but it defeats the object because you never become aware of an XSS problem. The problem is Nationwide's they need to beef up their online security.

I would probably use ABE: The very prescence of NoScript causes the problem so ABE can't be used. Can't use the -no-remote switch because I have no access to the password manager shortcut. On the Nationwide Profile Manager instance I looked under addons for NoScript and it listed NoScript Suite Lit...

Is this actually anything to do with "dragging" into the Customer number: field, or is this just yet another in a long series of "banks" that fart on XSS related issues. No, but it was an under FF45 but after a report on bugzilla and some running around they eventually fixed it....

Thrawn wrote:If you must keep using it, I recommend creating a separate profile, and locking down that profile so you can't visit any other site.

Thx. I've linked this thread in an internal message to their webmaster. I'm already using profile manager but not sure its worth the effort but thanks anyway.

When logging onto https://onlinebanking.nationwide.co.uk/AccessManagement/Login and dragging the customer number from a legacy password manager the drag will not drop into the box. Eventually it does but the browser stalls whilst waiting for it to happen. Things appear to work normally after this. A...

The sites are lloydsbank.com and halifax.co.uk Mozilla crash report 8fc83115-7a93-4752-bc8b-740a32160309 Clicking the Flash report button and interacting with the page logons launches an error form asking to open or save a file with name: 6a6176617363726970745f5f2866756e6374696f6e28297b66756e6374696...

Exactly same problem as reported for https://www.bancsabadell.com/ https://forums.informaction.com/viewtopic.php?f=7&t=21629 Did look at this topic before posting under general. There are no about:crashes reports. It hangs and have to forcibly shut down FF. I will just have to disable NoScript w...

lloydsbank.co.uk and halifax.co.uk

This is really pissing me off!

And its likely to stay disabled.

The problem did go away by placing some sites on the white list.

But its back under FF 44.0.2 and white list entries is not fixing the problem.

I don't quite know what you mean but I white listed aliunicorn.com and the login boxes appeared so thanks. Strange thing though. When I had the problem I took a screen shot and the NoScript icon is definitely showing the global scripts are allowed exclamation mark yet the login boxes are not showing...

Can't upload the image no admin permission. Can't link to image on a public server, too much security in the way

https://login.aliexpress.com/buyer.htm? ... xpress.com