10 Buggy XSS dialog; no way to add full domain to exceptions

Bug reports and enhancement requests
Post Reply
User avatar
juozas
Junior Member
Posts: 22
Joined: Sat Nov 25, 2017 8:44 am
Location: Lithuania
Contact:

10 Buggy XSS dialog; no way to add full domain to exceptions

Post by juozas »

I've been using the new version of NoScript for a while, figured most features, except for how to get rid of few XSS window annoyances.

When browsing a subdomain with a custom theme in tumblr, XSS Dialog repeatedly pops up with blank background where I XSS originating from subdomain of tumblr.com to assets.tumblr.com and www.tumblr.com; Adding exception doesn't work properly until I reload the page as same XSS is repeating multiple times; No option to add exception to whole domain, I'd like to have one, as repeating this on multiple subdomains might be quite annoying.
XSS window is white until I right click on it to make it work, Disabling XSS protection from options tab doesn't work, as it get's re-enabled when I re-open the page, clear exceptions button doen't work, must manually edit storage-sync.sqlite to clear them.

Edit: I found that problem about disabling XSS warning posted, that it's no way to disable it too.

Screenshots:
ImageImage
ImageImage
Сделано в СССР
Mozilla/5.0 (X11; Linux x86_64; rv:57.0) Gecko/20100101 Firefox/57.0
ughh
Posts: 3
Joined: Sun Nov 26, 2017 8:35 pm

Re: 10 Buggy XSS dialog; no way to add full domain to except

Post by ughh »

I also would like to add that there is no "Always block requests from" option - so the annoying popup appears multiple times asking the same thing over and over on sites with XSS.
Btw, devs, could you make the popup appear in the middle of the screen like in pre v10?
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0
DaveDub
Posts: 4
Joined: Thu Nov 23, 2017 8:47 am

Re: 10 Buggy XSS dialog; no way to add full domain to except

Post by DaveDub »

I also have this problem, blank XSS popups constantly. It would be nice to a have a "deny by default" option.
Mozilla/5.0 (X11; Linux x86_64; rv:57.0) Gecko/20100101 Firefox/57.0
pebas
Posts: 1
Joined: Mon Nov 27, 2017 4:43 pm

Re: 10 Buggy XSS dialog; no way to add full domain to except

Post by pebas »

Same problem here. Blank Pop-up until I right click and also like an option to "Always Block" and an "Exception for the whole domain".

My system is Ubuntu 16.04.03 (4.4.0-101-generic), Firefox 57.0 (64-bit) and NoScript 10.1.3c1

Thanks in advance.
Mozilla/5.0 (X11; Linux x86_64; rv:57.0) Gecko/20100101 Firefox/57.0
rugk
Junior Member
Posts: 23
Joined: Mon Dec 28, 2015 3:40 pm

Re: 10 Buggy XSS dialog; no way to add full domain to except

Post by rugk »

I think that white popup is a problem of Firefox. (I could also reproduce this with another WebExtension) Are you all using Linux?

I have reported this at https://bugzilla.mozilla.org/show_bug.cgi?id=1421037. If you are affected by this problem, follow the bug there and/or report your system specs, in case that helps them.
Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:57.0) Gecko/20100101 Firefox/57.0
Post Reply