InformAction Forums

maurix wrote:It was me in the previous post. Didn't realized I was posting as a guest

Fixed.

As to the NoScript issue, search.php?keywords=mpstat&terms=all&sr=posts

... [NoScript XSS] Upload sospetto verso [http://36e4f0e9.mpstat.us/###DATA###%7B%22http%22%3A%7B%22%3A%2F%2F%22%3A%7B%22d%22%3A%7B%222qp6cnfg3bg1d.cloudfront.net%2Ftt-f00f2e7bca65e9f8409fdb3bcddfa031664224255d7bd2f6b3de8ff11ababe20.js%22%3A%2235a7%2C4z%22%2C%22s.serving-sys.com%2FSemiCachedScripts%2FebOneTag.js%22%3A%2234n7%2C3q%22%7D%2C%22s%22%3A%7B%22ervice.maxymiser.net%2F%22%3A%7B%22api%2Feu%2Fikea.it%2F95b880%2Fmmapi.js%22%3A%223f7%2C5q%22%2C%22cg%2Fv5%2F%3Ffv%3Ddmn%253Dikea.it%253Bref%253Dhttp%25253A%25252F%25252Fwww.ikea.com%25252Fms%25252Fit_IT%25252Fcompraonline%25252Findex.html%253Burl%253Dhttp%25253A%25252F%25252Fwww.ikea.com%25252Fms%25252Fit_IT%25252Fcompraonline%25252Findex.html%253Bscrw%253D1024%253Bscrh%253D768%253Bclrd%253D24%253Bcok%253D1%26lver%3D1.7%26jsncl%3DmmRequestCallbacks%255B1%255D%26ri%3D1%22%3A%223ni%2C1k%22%7D%2C%22tatic.hotjar.com%2Fc%2Fhotjar-283468.js%3Fsv%3D5%22%3A%2234ii%2C8p%22%7D%2C%22www.%22%3A%7B%22ikea.com%2Fms%2F%22%3A%7B%22it_IT%2F%22%3A%7B%22c%22%3A%7B%22ompraonline%2F%22%3A%7B%22index.html%22%3A%220%2C4c%2Ck%2Cf%2Cf%2C%2Cf%2Cf%2Cf%22%2C%22home-slider%2Fassets%2Fjs%2Fjquery-1.9.1.min.js%22%3A%22399%2C8y%2C1%7C32fs%2C1l%2C1%22%7D%2C%22ss%2Flocal_em.css%22%3A%22291%2C91%2C1%22%2C%22ustomer_service%2Fecommerce%2F%22%3A%7B%22css%2Fstyle.css%22%3A%2229g%2C8v%2C1%22%2C%22js%2F%22%3A%7B%22script.js%22%3A%2239o%2C8u%2C1%7C31qu%2C6l%2C2%7C32jq%2C2j%2C2%22%2C%22customcart-live-evo-2.js%22%3A%2239w%2C8q%2C1%7C31r6%2C6j%2C1%7C32mm%2C1s%2C2%22%7D%7D%7D%2C%22js%2FnavOptions.js%22%3A%2237h%2C8d%2C2%22%7D%2C%22js%2F%22%3A%7B%22js_main.js%22%3A%2236r%2C8u%2C2%22%2C%22blank.js%22%3A%22372%2C8o%2C2%22%2C%22textbox.js%22%3A%2237r%2C88%2C1%22%2C%22category_page.js%22%3A%2237z%2C87%2C2%22%2C%22survey_global.js%22%3A%223bj%2C7f%2C1%22%2C%22new_survey_popup.js%22%3A%223bq%2C7d%2C1%22%7D%2C%22css%2F%22%3A%7B%22global.css%22%3A%22287%2C84%2C2%22%2C%22css_main.css%22%3A%2228i%2C84%2C4%22%2C%22new_category_page.css%22%3A%2228t%2C8u%2C2%22%7D%7D%2C%22googleadservices.com%2Fpagead%2Fconversion_async.js%22%3A%2234hp%2C4q%2C2%22%7D%2C%22tags.tiqcdn.com%2Futag%2Fikea%2Fit-main%2Fprod%2Futag.%22%3A%7B%223%22%3A%7B%223.js%3Futv%3Dut4.39.201602260824%22%3A%223499%2C4y%22%2C%22.js%3Futv%3Dut4.39.201605171122%22%3A%2234ck%2C5c%22%7D%2C%221.js%3Futv%3Dut4.39.201606081020%22%3A%2234c4%2C55%22%2C%2251.js%3Futv%3Dut4.39.201609131337%22%3A%2234cx%2C54%22%2C%22sync.js%22%3A%2236j%2C8i%22%2C%22js%22%3A%22310e%2C65%22%7D%2C%22hostproduzione.ikea.it%2Fcarrello%2F%22%3A%7B%22rest.php%3FcustomAddOn%2Fslider_2%22%3A%2231sa%2C19%22%2C%22miniProxy.php%3Fhttp%3A%2F%2Fwww.ikea.com%2Fit%2Fit%2Fcatalog%2Fproducts%2FS49019277%2C20328006%2CS89129392%2C50247829%2C50269958%2C%3Fversion%3Dv1%26type%3Dxml%26dataset%3Dnormal%2Cprices%2CallImages%2CparentCategories%2Cattributes%22%3A%2251yp%2C2n%22%7D%2C%22ikea.122.2o7.net%2Fb%2Fss%2Fikeaitnuovecollezioni15%2F1%2FH.27.4%2Fs3%22%3A%7B%222396596411316%3FAQB%3D1%26ndh%3D1%26t%3D30%252F11%252F2016%252010%253A42%253A12%25205%2520-60%26fid%3D4E43DF64E9D9DE12-302F2425B4A0A02A%26ce%3DUTF-8%26ns%3Dikea%26g%3Dhttp%253A%252F%252Fwww.ikea.com%252Fms%252Fit_IT%252Fcompraonline%252Findex.html%26r%3Dhttp%253A%252F%252Fwww.ikea.com%252Fms%252Fit_IT%252Fcompraonline%252Findex.html%26cc%3DEUR%26s%3D1024x768%26c%3D24%26j%3D1.8.5%26v%3DY%26k%3DY%26bw%3D972%26bh%3D507%26p%3DGoogle%2520Earth%2520Plug-in%253BGoogle%2520Talk%2520Plugin%253BGoogle%2520Talk%2520Plugin%2520Video%2520Renderer%253BNASAEyes%253BPicasa%253BPlugin%2520applet%2520Java%253BShockwave%2520Flash%253BSilverlight%2520Plug-In%253B%26AQE%3D1%22%3A%2212fc%2C4f%22%2C%225553751942780%3FAQB%3D1%26ndh%3D1%26t%3D30%252F11%252F2016%252010%253A42%253A13%25205%2520-60%26fid%3D4E43DF64E9D9DE12-302F2425B4A0A02A%26ce%3DUTF-8%26ns%3Dikea%26pageName%3Dcompraonline%253Efront%26g%3Dhttp%253A%252F%252Fwww.ikea.com%252Fms%252Fit_IT%252Fcompraonline%252Findex.html%26cc%3DEUR%26c1%3Dcompra%2520online%2520-%2520ikea%26c2%3Dcompraonline%26c3%3Dcompraonline%26c4%3Dcompraonline%26v4%3Dcompraonline%26c5%3Dstatic%26c21%3Dcompraonline%26c44%3Dstart%2520of%2520visit%26c45%3Dweb%26v45%3Dweb%26v69%3D1.1%26s%3D1024x768%26c%3D24%26j%3D1.8.5%26v%3DY%26k%3DY%26bw%3D972%26bh%3D507%26p%3DGoogle%2520Earth%2520Plug-in%253BGoogle%2520Talk%2520Plugin%253BGoogle%2520Talk%2520Plugin%2520Video%2520Renderer%253BNASAEyes%253BPicasa%253BPlugin%2520applet%2520Java%253BShockwave%2520Flash%253BSilverlight%2520Plug-In%253B%26AQE%3D1%22%3A%22132u%2C4f%22%7D%2C%22bs.serving-sys.com%2FServing%3Fcn%3Dot%26onetagid%3D1740%26dispType%3Djs%26sync%3D0%26pageurl%3D%24%24http%253A%2F%2Fwww.ikea.com%2Fms%2Fit_IT%2Fcompraonline%2Findex.html%24%24%26activityValues%3D%24%24tp_site_level_1%3Dcompraonline%26Session%3D1483089386674%24%24%26ns%3D0%26rnd%3D04969590061096629%26referrer%3D%24%24http%3A%2F%2Fwww.ikea.com%2Fms%2Fit_IT%2Fcompraonline%2Findex.html%24%24%22%3A%2234u2%2C1x%22%7D%2C%22s%3A%2F%2F%22%3A%7B%22nuovecollezioni.ikea.it%2F%22%3A%7B%22sliderecommerce%2Fslider.js%22%3A%223a6%2Ca6%22%2C%22ecommerce%22%3A%7B%22120916%2F%22%3A%7B%22css%2F%22%3A%7B%22main.css%22%3A%222ad%2Ca2%22%2C%22colorbox.css%22%3A%222ak%2Ca0%22%7D%2C%22js%2F%22%3A%7B%22jquery.colorbox-min.js%22%3A%223ay%2C9t%22%2C%22mainNew.js%22%3A%223b5%2C9q%22%7D%7D%2C%22%2Fkits.json%3Fcallback%3DjsonCallback%26_%3D1483090932434%22%3A%22345h%2Cm%22%7D%2C%22nipprig%2Fjs%2Fms_code.js%22%3A%223ar%2C9x%22%2C%22header%2F%22%3A%7B%22zdheader.js%22%3A%223bb%2C7j%22%2C%22live.min.js%3Fv%3D2%22%3A%2232u2%2C3v%22%7D%7D%2C%22www.youtube.com%2Fembed%2F5RK-EeGru34%3Fautoplay%3D0%26controls%3D0%26rel%3D0%26showinfo%3D0%26modestbranding%3D1%26ps%3Ddocs%26enablejsapi%3D1%26widgetid%3D1%22%3A%2201q1%2C3h%22%2C%22googleads.g.doubleclick.net%2Fpagead%2Fviewthroughconversion%2F998441054%2F%3Frandom%3D1483090935312%26cv%3D8%26fst%3D1483090935312%26num%3D1%26fmt%3D3%26guid%3DON%26u_h%3D768%26u_w%3D1024%26u_ah%3D715%26u_aw%3D1024%26u_cd%3D24%26u_his%3D7%26u_tz%3D60%26u_java%3Dtrue%26u_nplug%3D8%26u_nmime%3D26%26data%3Decomm_pagetype%253Dother%253Becomm_value%253D0%26frm%3D0%26url%3Dhttp%253A%252F%252Fwww.ikea.com%252Fms%252Fit_IT%252Fcompraonline%252Findex.html%26ref%3Dhttp%253A%252F%252Fwww.ikea.com%252Fms%252Fit_IT%252Fcompraonline%252Findex.html%26tiba%3DCompra%2520Online%2520-%2520IKEA%26async%3D1%22%3A%2214qk%2Czh%22%2C%22script.hotjar.com%2Fmodules-197d79caaa971610bcdd7c269360e443.js%22%3A%2234uj%2C9p%22%2C%22vars.hotjar.com%2Frcj-2e6153f931e5c8a79f89c0c503e3c25e.html%22%3A%2204va%2Clx%22%7D%7D%7D] ...

Can you just block the request with ABE? If that doesn't fix the problem by itself, also add this line to NoScript Options > Advanced > XSS > Exceptions

This happens twice while trying to load a page on Ancestry.com: [NoScript XSS] Sanitized suspicious upload to [https://36f1f23d.mpstat.us/###DATA###%7B%22https%3A%2F%2F%22%3A%7B%22c%22%3A%7B%22.mfcreative.com%2F%22%3A%7B%22lib%2Ftgn%2Fcombo.ashx%3Fx%2F%22%3A%7B%22css%2Fv1%2Fmain.css%26x%2Fcss%2Fv1%2Factivity-indicator.css%26x%2Fcss%2Fv2%2Falert.css%26x%2Fcss%2Fv1%2Fautocomplete.css%26x%2Fcss%2Fv1%2Fbutton.css%26x%2Fcss%2Fv1%2Fcallout.css%26x%2Fcss%2Fv1%2Fcard.css%26x%2Fcss%2Fv2%2Fcarousel.css%26x%2Fcss%2Fv1%2Fcontainer.css%26x%2Fcss%2Fv1%2Fform.css%26x%2Fcss%2Fv1%2Fgrid.css%26x%2Fcss%2Fv1%2Ficon.css%26x%2Fcss%2Fv3%2Fmodal.css%26x%2Fcss%2Fv1%2Fpagination.css%26x%2Fcss%2Fv2%2Fpaging.css%26x%2Fcss%2Fv1%2Fpanel.css%26x%2Fcss%2Fv1%2Fphoto.css%26x%2Fcss%2Fv1%2Fsubcon.css%26x%2Fcss%2Fv2%2Ftab.css%26x%2Fcss%2Fv1%2Ftable.css%26x%2Fcss%2Fv1%2Ftemplate.css%26x%2Fcss%2Fv1%2Ftooltip.css%26x%2Fcss%2Fv1%2Fuser-card.css%26x%2Fcss%2Fv2%2Fprogress.css%22%3A%222c9%2C1i%22%2C%22js%2Fv2%2Falert.js%26x%2Fjs%2Fv2%2Fautocomplete.js%26x%2Fjs%2Fv1%2Fcallout.js%26x%2Fjs%2Fv2 ...

... [NoScript XSS] Sanitized suspicious upload to [https://36eb5555.mpstat.us/###DATA###%7B%22https%3A%2F%2F%22%3A%7B%22b%22%3A%7B%22log.etsy.com%2Fen%2Ffiles%2F2015%2F11%2F%22%3A%7B%22hide-and-home-SMALL.jpg%22%3A%221h6%2Ce7%22%2C%22personalized-soap-diy-small.jpg%22%3A%221ha%2Ce4%22%2C%22tree-change-header1-small1.jpg%22%3A%221hb%2Ce3%22%7D%2C%22cn.etsy.com%2Fbeacon%3F%22%3A%7B%22p%22%3A%7B%22hp_ab_var_names%3Don%253Bon%253Bon%253Boff%253Boff%253Boff%253Boff%253Boff%253Boff%253Boff%253Boff%253Bon%253Boff%253Bon%253Bon%253Bboth%253Bon%253Boff%253Boff%253Boff%253Bon%253Bon%253Bon%253Boff%253Bon%253Bon%253Boff%253Bon%253Boff%253Boff%253Bon%253Boff%253Boff%253Boff%253Bon%253Boff%253Bineligible%253Bon%253Bon%253Bon%253Bon%253Bon%253Boff%253Bon%253Bon%253Bon%253Bon%253Bon%253Bon%253Bon%253Bon%253Bon%253Bthree_per%253Beu_style%253Boff%253Boff%253Bon%253Bon%253Bon%253Bon%253Bon%253Bcontrol%253Bon%253Boff%253Boff%253Boff%253Boff%253Boff%253Bon%253Bon%253Boff%253Bineligible%253Bineligible%253Boff% ...