Search found 11 matches

by ALbino
Mon Nov 02, 2015 10:57 pm
Forum: NoScript Support
Topic: XSS and phpMyAdmin on Firefox
Replies: 5
Views: 2250

Re: XSS and phpMyAdmin on Firefox

Can you add this XSS exception and see if it works? NoScript Options > Advanced > XSS, add ^@chrome://browser/content/browser.xul$ Yep, that seems to have fixed it. I was able to reproduce it reliably before, but now it's not happening. This won't fix your current problem, but since phpMyAdmin has ...
by ALbino
Mon Nov 02, 2015 7:46 pm
Forum: NoScript Support
Topic: XSS and phpMyAdmin on Firefox
Replies: 5
Views: 2250

XSS and phpMyAdmin on Firefox

Hey all, There's a database I work with every day and today I got an XSS error from "chrome" while refreshing a page in phpMyAdmin. I usually hit the page embedded Refresh button, but this time I hit F5 and the NoScript error popped up and it redirected me a sanitized version of the page, ...
by ALbino
Tue Jul 28, 2015 10:54 pm
Forum: NoScript Support
Topic: conflict with pocket
Replies: 7
Views: 3239

Re: conflict with pocket

barbaz wrote:@ALbino: already reported viewtopic.php?p=77163#p77163
Perfect. Thanks barbaz.
by ALbino
Tue Jul 28, 2015 3:57 am
Forum: NoScript Support
Topic: conflict with pocket
Replies: 7
Views: 3239

Re: conflict with pocket

I finally tried Pocket today, and it failed so I went searching for why and quickly realized it was NoScript. I noticed in the changelog that about:pocket-saved was added to the Default Whitelist in 2.6.9.30rc5, but FWIW I'm running 2.6.9.32 and it wasn't listed in my Whitelist. Interestingly about:...
by ALbino
Sat Mar 02, 2013 8:43 pm
Forum: NoScript Support
Topic: Verizon Business XSS Issues
Replies: 14
Views: 9613

Re: Verizon Business XSS Issues

Well, what they've basically done is: Instead of using their keys, they've just removed the lock from their front door. Either they were too lazy to build the site properly, or (even scarier) they were totally unaware of just how dangerous their setup is. Either way, someone didn't do their job pro...
by ALbino
Sat Mar 02, 2013 2:10 am
Forum: NoScript Support
Topic: Verizon Business XSS Issues
Replies: 14
Views: 9613

Re: Verizon Business XSS Issues

I'm not sure I could even explain the problem, but maybe I'll post it on their forums :)
by ALbino
Fri Mar 01, 2013 8:41 pm
Forum: NoScript Support
Topic: Verizon Business XSS Issues
Replies: 14
Views: 9613

Re: Verizon Business XSS Issues

Tom T. wrote:How about

Code: Select all

^https://business\.verizon\.com/MyBusinessAccount/*
I gave it a try, but it didn't work. If it helps the full URL is:

Code: Select all

http://business.verizon.net/SMBPortalWeb/vanity.url?orig_url=/SMBPortalWeb/sbcLanding
by ALbino
Fri Mar 01, 2013 12:10 am
Forum: NoScript Support
Topic: Verizon Business XSS Issues
Replies: 14
Views: 9613

Re: Verizon Business XSS Issues

Giorgio Maone wrote: The only work-around is adding an exception in NoScript Options|Advanced|XSS like this:

Code: Select all

^@https://www\d*\.verizon\.com/FORYOURSMALLBIZ/
This corrected the error when accessing the deep pages, thanks so much. Can you give me a similar one for the business.verizon.com address as well?
by ALbino
Thu Feb 28, 2013 5:55 pm
Forum: NoScript Support
Topic: Verizon Business XSS Issues
Replies: 14
Views: 9613

Re: Verizon Business XSS Issues

Stuff such as "Change My Plan" cannot be seen until you log into your account. But just going to the main page without logging in results in a XSS error as well: "NoScript filtered a potential cross-site scripting (XSS) attempt from [https://business.verizon.com]." URL: http://bu...
by ALbino
Thu Feb 28, 2013 5:16 am
Forum: NoScript Support
Topic: Yellow alert bar gone; can't access "Recently Blocked"
Replies: 2
Views: 1461

Re: Yellow alert bar gone; can't access "Recently Blocked"

I think this problem appeared after the most recent NoScript update. I no longer get the yellow alert at the bottom of the screen that allows me to see blocked scripts and selectively allow them. Because of that, I have no way to access the "Recently Blocked Scripts" list, since there doe...
by ALbino
Thu Feb 28, 2013 5:08 am
Forum: NoScript Support
Topic: Verizon Business XSS Issues
Replies: 14
Views: 9613

Verizon Business XSS Issues

Hey all, I've searched around for this, but there doesn't seem to be much helpful information. On the business.verizon.com* pages a lot of the stuff like "Change My Plan" launches a new window at www22.verizon.com**, which fails every time due to: "NoScript filtered a potential cross-...