InformAction Forums

... parsing and execution, happen). How do you get MutationObserver to prevent script execution in Firefox? This example doesn't for me - data:text/html,<meta charset="utf-8"><script>let m=new MutationObserver((ra)=>{for(let r of ra){for(let n of r.addedNodes){if(n.tagName=='SCRIPT')n.remove();}}});m.observe(document.documentElement,{childList:true,subtree:true});window.addEventListener('DOMContentLoaded',(ev)=>{let ...

... "contentDocument"]) { for (let iface of ["Frame", "IFrame", "Object"]) { let proto = win[`HTML$ifaceElement`].prototype; modifyContentProperties(proto, property, modifyTarget) } } } function modifyContentProperties(proto, property, modifyTarget) ...

... >= 88, but I can see it in 78.10.0esr and can confirm the work-around. Still trying to pinpoint the real culprit, though, since the temporary XHTML<->HTML node swap happens no matter what, so it doesn't seem to be it.

phyzome

... Content Security Policy: Couldn’t process unknown directive ‘script-src-attr’ with one of these mixed in: XML Document: temporary replacing <html xmlns="http://www.w3.org/1999/xhtml"> with <HTML> DocumentCSP.js:42:17 The page currently ships with the following CSP, if this is relevant: ...

Clicking this link trips the XSS filter - https://valadoc.org/gtk+-3.0/Gtk.Window.set_title.html#! NoScript detected a potential Cross-Site Scripting attack from https://forums.informaction.com to https://valadoc.org. Suspicious data: (URL) https://valadoc.org/gtk+-3.0/Gtk.Window.set_title.html#! ...

NSfan

... artefacts in my (Firefox) browser? An example is : </script></head><body><noscript><iframe src="https://www.googletagmanager.com/ns.html?id= If Noscript has left something behind in my browser, how do I get rid of it completely? I wondered if perhaps something had been left in about:config ...

Guest

... I can see the NS icon change in front of my eyes from blocked to allow. E.g. https://www.nytimes.com/2021/02/25/opinion/supreme-court-elections.html How is this even possible?

selden

Version 11.2.1rc1 does indeed fix the problem.

Thanks, a lot!

barbaz wrote: ↑Sat Feb 06, 2021 11:19 pm (11.2.1rc1 xpi is not signed.)

It was on AMO, but messed up with the synchronization. Fixed, thanks.

v 11.2.1rc1 ============================================================ x Prevent double script on trusted file:// pages in some edge cases x Updated events archive x Prevent detection of wrapped functions (e.g. in WebGL interception) on Chromium x Updated TLDs x Merge German language update (11.2...

Thank you for your report. I couldn't reproduce your issue as described, likely because I couldn't try on a Windows machine, but I could produce the same effect by disabling and re-enabling NoScript from the add-ons manager. I'm not sure the root cause is the same, but I could fix my own instance in...

selden

... 20H2 Interactive Fiction compiler tweego 2.1.1 Interactive Fiction story format SugarCube 2.34.1 A story created using tweego and SugarCube is an HTML file containing javascript. ---- Problem: Interactive Fiction stories fail with a runtime error when Firefox v85.0.1 is NOT already open and I ...

dbone0109

... need an end user's eyes or ears input on potential security issues. I asked if there was an appropriate server that i could uplift the NoScript html file to for their post processing --- similar to high tech companies like Apple. At least they have evidence of possible security breaches. No ...

pstrg

[Firefox 84.0.2 / NoScript 11.1.9] SyncBackPro (a file backup program) generates a html report after running if there's something to report. A typical report name is file:///C:/Users/Paulo/AppData/Local/2BrightSparks/SyncBackPro/Logs/2_2%20(O-T)_Log_Page4.html I ...

Iceweasel died in 2016, almost five years ago! And by now it has many publicly-known vulnerabilities. Please update yourself to a current browser for your own safety. The offline website data feature is disabled by default in modern browsers and is being removed , so your question is pretty much moo...

InformAction Forums

Search found 2892 matches: html

Prevent script execution with MutationObserver in Firefox?

multiple patchWindow calls

Re: Bug involving XHTML, CSP, and Firefox ESR

Bug involving XHTML, CSP, and Firefox ESR

[Fixed] XSS filter False Positive

[Unrelated] Noscript still there after uninstall?

NYT somehow bypasses noscript

Re: Local html file fails if Firefox isn't already running

Re: Local html file fails if Firefox isn't already running

Re: Local html file fails if Firefox isn't already running

Re: Local html file fails if Firefox isn't already running

[FIXED] Local html file fails if Firefox isn't already running

Re: Potential Cross-Site Scripting Attack at RBC Royal Bank..?

file:// blocked

Re: Offline Website Data