NoScript 11.2rc2
new profile
STR:
1) trigger a XSS prompt by entering the following in the url bar -
Code: Select all
http://noscript.net/<script>
2) trigger a XSS prompt by entering the following in the url bar -
Code: Select all
https://noscript.net/<script>
3) NoScript Options > Advanced, highlight only the https XSS user choice and click "Clear XSS choices"
Expected results:
The https XSS user choice should be cleared, the plain http XSS user choice should stay.
Actual results:
UI claims the plain http XSS user choice was cleared and that the https XSS user choice still exists. Reloading NoScript Options page shows that, however, it was in fact the https XSS user choice that got cleared, and the http XSS user choice is still there, as specified.