Cannot Copy out of Console2 when open from XSS Notification

Bug reports and enhancement requests

Cannot Copy out of Console2 when open from XSS Notification

Postby therube » Thu Nov 15, 2012 2:46 am

Cannot Copy (text) out of Console² (like Error Console) when opened from NoScript XSS notification, Show Console...

http://forums.mozillazine.org/viewtopic ... #p12480797

install NoScript
install Console2
open a page that generates an XSS warning
use NoScript XSS notification to 'Show Console...'

Error Console (Console2) opens

attempt to copy text out from Console2

text is not copied

SeaMonkey is affected.
FF looks not to be.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/17.0 Firefox/17.0 SeaMonkey/2.14
User avatar
therube
Ambassador
 
Posts: 7170
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: Cannot Copy out of Console2 when open from XSS Notificat

Postby Giorgio Maone » Thu Nov 15, 2012 8:37 am

Are you able to copy any other Console2 message on Seamonkey?
If not, does disabling NoScript help?
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:16.0) Gecko/20100101 Firefox/16.0
User avatar
Giorgio Maone
Site Admin
 
Posts: 8634
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy

Re: Cannot Copy out of Console2 when open from XSS Notificat

Postby therube » Thu Nov 15, 2012 4:17 pm

> Are you able to copy any other Console2 message on Seamonkey?

Not if I open Console2 from an (NoScript) XSS warning dialog.
Otherwise, if I manually open Console2, either by shortcut or menu, then yes.

> If not, does disabling NoScript help?

Well yes, but then I have no way to generate an XSS warning dialog ;-).


Phil posted a suggested fix.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 5.1; rv:17.0) Gecko/17.0 Firefox/17.0 SeaMonkey/2.14
User avatar
therube
Ambassador
 
Posts: 7170
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: Cannot Copy out of Console2 when open from XSS Notificat

Postby Giorgio Maone » Thu Nov 15, 2012 10:24 pm

Phil's fix will be included in next dev build, thanks.
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:16.0) Gecko/20100101 Firefox/16.0
User avatar
Giorgio Maone
Site Admin
 
Posts: 8634
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy

Re: Cannot Copy out of Console2 when open from XSS Notificat

Postby therube » Mon Nov 19, 2012 3:19 pm

Resolved, thank you :-).

Code: Select all
http://www.yoursite.com/index.html?name=<script>alert('You just found a XSS vulnerability')</script>
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 5.1; rv:17.0) Gecko/17.0 Firefox/17.0 SeaMonkey/2.14
User avatar
therube
Ambassador
 
Posts: 7170
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA


Return to NoScript Development

Who is online

Users browsing this forum: No registered users and 6 guests