noscript always forgets imdb xss settings

Ask for help about NoScript, no registration needed to post
nathanpeters
Posts: 5
Joined: Sat Dec 09, 2017 2:52 am

noscript always forgets imdb xss settings

Post by nathanpeters » Sat Dec 09, 2017 2:57 am

Every time I visit imdb.com I get an xss warning:

NoScript detected a potential Cross-Site Scripting attack
from http://www.imdb.com to http://ia.media-imdb.com.
Suspicious data:
window.name

Every time I choose : **Always** allow requests from imdb to ia.media-imdb.com (I did *not* choose only allow once)

Every time I close the browser and re-open the site I get the warning again.

What gives?

Why is noscript not saving this "always allow" setting and forgetting it ?
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0

barbaz
Senior Member
Posts: 9279
Joined: Sat Aug 03, 2013 5:45 pm

Re: noscript always forgets imdb xss settings

Post by barbaz » Sat Dec 09, 2017 3:02 am

What version of NoScript are you using?
*Always* check the changelogs BEFORE updating that important software!
-

nathanpeters
Posts: 5
Joined: Sat Dec 09, 2017 2:52 am

Re: noscript always forgets imdb xss settings

Post by nathanpeters » Sat Dec 09, 2017 3:06 am

Firefox 57, Noscript 10.1.5.6 (last updated December 8, 2017 - today).

It's been doing this since It was released for Firefox 57. I didn't have any issues with noscript in Firefox 56.
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0

Tomatix
Senior Member
Posts: 60
Joined: Tue Dec 05, 2017 3:05 pm

Re: noscript always forgets imdb xss settings

Post by Tomatix » Sat Dec 09, 2017 11:20 pm

nathanpeters wrote:Firefox 57, Noscript 10.1.5.6 (last updated December 8, 2017 - today).

It's been doing this since It was released for Firefox 57. I didn't have any issues with noscript in Firefox 56.
Yes, it was a bug, that XSS settings weren't saved. But for me it works since 10.1.5.6:
x [XSS] Fixed user choices forgot across browser sessions

Maybe try reinstalling NS and restarting FF.
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:57.0) Gecko/20100101 Firefox/57.0

nathanpeters
Posts: 5
Joined: Sat Dec 09, 2017 2:52 am

Re: noscript always forgets imdb xss settings

Post by nathanpeters » Tue Dec 12, 2017 5:31 am

Uninstalling Noscript and re-installing seems to have worked. I didn't get any additional popups when I visited imdb today.
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0

Post Reply