XSS question in Skyline pages

Ask for help about NoScript, no registration needed to post
Bencyc
Junior Member
Posts: 30
Joined: Fri Nov 24, 2017 9:57 am

XSS question in Skyline pages

Post by Bencyc »

I have had for some time a problem viewing Skyline live web cams.
For instance:http://www.skylinewebcams.com/it/webcam ... adeje.html

The behaviour of the site has been erratic, sometimes maintaining I have a AdBlocker on even if it is not.

Now I get a XSS message asking to accept or deny acces to the page. If I allow it then the cams work OK even if I have UBLock origin on.

If I allow just http://www.skylinewebcams.com it does not open the site
but if I allow only the particular page (http://www.skylinewebcams.com/it/webcam ... adeje.html) it goes OK.

The same thing with all other Skyline webcam pages.

Now the question is, is it safe to allow the XSS question and why is coming up with that domain?
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:68.0) Gecko/20100101 Firefox/68.0
User avatar
therube
Ambassador
Posts: 7924
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: XSS question in Skyline pages

Post by therube »

(I happened to be there of late.
Last number of days, the particular feeds I looked at did not require disabling uBlock.
Looking today, most did.

In neither case did I get any XSS notices.)
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 5.1; rv:52.0) Gecko/20100101 SeaMonkey/2.49.5
Bencyc
Junior Member
Posts: 30
Joined: Fri Nov 24, 2017 9:57 am

Re: XSS question in Skyline pages

Post by Bencyc »

After a certain period of time the Skyline sites lock themselves so that the cams are not working any more
and there has come a note on the cam picture: AD Block .

I do not know if that is a question of Skyline sites themselves or is it a question of NoScript or
Ublockorigin causing a time restriction.

I managed to get the following note from somewhere:

"Filterskylinewebcams.com##+js(setTimeout-defuser, change(), 14000)".

I cannot reproduce it any more because I do not remember/know how and wheere I got it from (:

So the question arises is there some kind of time restriction filter on NoScript or UBlockorigin?
(I do not mean NS temporay allowance. It does not change anything in this respect)
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:68.0) Gecko/20100101 Firefox/68.0
barbaz
Senior Member
Posts: 10841
Joined: Sat Aug 03, 2013 5:45 pm

Re: XSS question in Skyline pages

Post by barbaz »

Could you please post the actual full text of the XSS warning?
*Always* check the changelogs BEFORE updating that important software!
-
Bencyc
Junior Member
Posts: 30
Joined: Fri Nov 24, 2017 9:57 am

Re: XSS question in Skyline pages

Post by Bencyc »

The image can be seen :

https://aijaa.com/nirOty
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:68.0) Gecko/20100101 Firefox/68.0
barbaz
Senior Member
Posts: 10841
Joined: Sat Aug 03, 2013 5:45 pm

Re: XSS question in Skyline pages

Post by barbaz »

That's not a XSS warning. It's a Blocked Objects prompt.
*Always* check the changelogs BEFORE updating that important software!
-
Post Reply