How to Login to eBay with NoScript

General discussion about the NoScript extension for Firefox
Post Reply
BigMadRab
Posts: 1
Joined: Sat Apr 05, 2014 2:05 pm

How to Login to eBay with NoScript

Post by BigMadRab »

Does anyone know how to Login to eBay with NoScript? If I allow XSS I get to a redirection page however that quickly relodes and loops back to the original login page.

Any help would be greatly appreciated.
Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.154 Safari/537.36
User avatar
Thrawn
Master Bug Buster
Posts: 3106
Joined: Mon Jan 16, 2012 3:46 am
Location: Australia
Contact:

Re: How to Login to eBay with NoScript

Post by Thrawn »

Can you copy the XSS message from the Browser Console (Ctrl+Shift+J) and paste it here?

If the spam filter blocks you, then please send it to a moderator via private message.
======
Thrawn
------------
Religion is not the opium of the masses. Daily life is the opium of the masses.

True religion, which dares to acknowledge death and challenge the way we live, is an attempt to wake up.
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0
robdc
Posts: 2
Joined: Fri Oct 02, 2015 7:38 pm

Re: How to Login to eBay with NoScript

Post by robdc »

I am having the same problem. Whenever I try to log in it loops back to the login page, I will try to message a mod
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:41.0) Gecko/20100101 Firefox/41.0
barbaz
Senior Member
Posts: 10841
Joined: Sat Aug 03, 2013 5:45 pm

Re: How to Login to eBay with NoScript

Post by barbaz »

robdc wrote:I will try to message a mod
Have they helped you to a solution? If so can you please post the solution here for others with this problem to reference?
*Always* check the changelogs BEFORE updating that important software!
-
robdc
Posts: 2
Joined: Fri Oct 02, 2015 7:38 pm

Re: How to Login to eBay with NoScript

Post by robdc »

barbaz wrote:
robdc wrote:I will try to message a mod
Have they helped you to a solution? If so can you please post the solution here for others with this problem to reference?
I forgot all about this and just suffered with the persisting issue, but it's starting to infuriate me again. I never heard back from the mod I messaged, so I have just messaged another on.
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0
barbaz
Senior Member
Posts: 10841
Joined: Sat Aug 03, 2013 5:45 pm

Re: How to Login to eBay with NoScript

Post by barbaz »

No one should ever have to wait that long for a response from a Moderator ("green user") for something like this.

@robdc: see PM
*Always* check the changelogs BEFORE updating that important software!
-
User avatar
therube
Ambassador
Posts: 7924
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: How to Login to eBay with NoScript

Post by therube »

robdc wrote: I sent this message to another mod several months ago...

The Browser Console says:

[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: ds1=ats/1443815184428; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: ds2=asotr/b7qefz8wzN_z^; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: ebay=%5Ecv%3D15555%5Esin%3Din%5Ejs%3D1%5EsfLMD%3D1388925412%5Esbf%3D%231000040000004%5Ecos%3D1%5E; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: dp1=bexpt/000144381486912456ff7795^pcid/98755244257f01290^a1p/056103090^bl/GB59d14610^fm/5.3.256366c10^kms/in59d14610^pbf/%2380800000000457f01290^mpc/9%7C356366c10^tzo/-3c560eed20^exc/0%3A0%3A0%3A056366c10^u1p/cm9iLWRj57f01290^u1f/Robert57f01290^; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: ns1=BAQAAAVAl2SF5AAaAAKUADVfwEpAxMDMwNzQ4MzkxLzA7De1oFQdAaj7P5O2V5zzzlmnClvE*; domain=.ebay.co.uk; path=/; HttpOnly; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: cssg=2a12876b1500a7ec736586f2ffffa76c; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: s=BAQAAAVAl2SF5AAWAABEAC1YO48AwMDAwMHJvYi1kYwABAAZWEDCQcm9iLWRjABIAClYQMJB0ZXN0Q29va2llAAMABVYQMJAxNjM4NAD0ACJWEDCQJDIkUFJJZGliOHIkMlhaOVBoNEROTkpDd0RtdmNwLzVvMAFlAAJWEDCQIzIBRQAIV/ASkDUzODRjYmYxAAYAAVYQMJA1AKgAAVYQMJAxAPgAIFYQMJAyYTEyODc2YjE1MDBhN2VjNzM2NTg2ZjJmZmZmYTc2YwAMAApWEDCQMTAzMDc0ODM5MQA9AAZWEDCQcm9iLWRjSbTZ1wMpBftHhzXuTu9oxxNVnk4*; domain=.ebay.co.uk; path=/; HttpOnly; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: nonsession=BAQAAAVAl2SF5AAaAAEAABlfwEpByb2ItZGMAEAAGV/ASkHJvYi1kYwAzAAxX8BKQdG4yNCA4YmIsR0JSAPMAIlfwEpAkMiRQUklkaWI4ciQyWFo5UGg0RE5OSkN3RG12Y3AvNW8wAWQAA1fwEpAjOGEABAAGV/ASkHJvYi1kYwCqAAFX8BKQMwDKACBfdOCQMmEwZTlhYTgxNTAwYTM1ODI4MTQ1OWRlZmZmNTdmOGQAmgAHVhGCEHJvYi1kY2oAywABVg7mGDMAnAA4V/ASkG5ZK3NIWjJQckJtZGo2d1ZuWStzRVoyUHJBMmRqNkFFazRLbURKaUJxQTJkajZ4OW5ZK3NlUT09AJ0ACFfwEpAwMDAwMDAwMF8s5gMPhZ5vWYg9rruJXlK0Irsl; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: shs=BAQAAAVAl2SF5AAaAAVUADlfwEpA2NjM2MjM0MzEwMDEsM7mCqiJjUuiVHwGjpLfQueqgFnOe; domain=.ebay.co.uk; path=/; HttpOnly; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://reg.ebay.co.uk: ebay=%5EsfLMD%3D1388925412%5Esin%3Din%5Esbf%3D%231000040000004%5Ecos%3D1%5Ecv%3D15555%5Ejs%3D1%5E; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://reg.ebay.co.uk: ns1=BAQAAAVAl2SF5AAaAAKUADVfwEpExMDMwNzQ4MzkxLzA7YVypcjfA6VvIHp3DUmKS35Uk0rM*; domain=.ebay.co.uk; path=/; HttpOnly; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://reg.ebay.co.uk: dp1=bkms/in59d14611^u1f/Robert57f01291^tzo/-3c560eed21^exc/0%3A0%3A0%3A056366c11^fm/5.3.256366c10^pcid/98755244257f01291^mpc/9%7C3561c0e11^a1p/056103091^u1p/cm9iLWRj57f01291^bl/GB59d14611^expt/000144381486912456ff7795^pbf/%2380800000000457f01291^; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://reg.ebay.co.uk: s=BAQAAAVAl2SF5AAWAAAwAClYQMJExMDMwNzQ4MzkxAPgAIFYQMJEyYTEyODc2YjE1MDBhN2VjNzM2NTg2ZjJmZmZmYTc2YwAGAAFWEDCRNQFlAAJWEDCRIzIAEgAKVhAwkXRlc3RDb29raWUAPQAGVhAwkXJvYi1kYwFFAAhX8BKRNTM4NGNiZjEAEQALVg7jwDAwMDAwcm9iLWRjAKgAAVYQMJAxAPQAIlYQMJEkMiRQUklkaWI4ciQyWFo5UGg0RE5OSkN3RG12Y3AvNW8wAAEABlYQMJByb2ItZGMAAwAFVhAwkTE2Mzg0hyDUI5HAZNPOLgcPQVHPNXQ3q/U*; domain=.ebay.co.uk; path=/; HttpOnly; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://reg.ebay.co.uk: nonsession=BAQAAAVAl2SF5AAaAAJ0ACFfwEpEwMDAwMDAwMACqAAFX8BKRMwFkAANX8BKRIzhhADMADFfwEpF0bjI0IDhiYixHQlIAywABVg7mGTQAmgAHVhGCEHJvYi1kY2oAQAAGV/ASkXJvYi1kYwAQAAZX8BKRcm9iLWRjAMoAIF904JEyYTBlOWFhODE1MDBhMzU4MjgxNDU5ZGVmZmY1N2Y4ZADzACJX8BKRJDIkUFJJZGliOHIkMlhaOVBoNEROTkpDd0RtdmNwLzVvMAAEAAZX8BKQcm9iLWRjAJwAOFfwEpFuWStzSFoyUHJCbWRqNndWblkrc0VaMlByQTJkajZBRWs0S21ESmlCcUEyZGo2eDluWStzZVE9PXFZdVuNoLceVv7fxvEga9KcZ+QL; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: ds1=ats/0; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: ds2=asotr/b7qefz8wzN_z^; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: ebay=%5Ecv%3D15555%5Esbf%3D%23%5E; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: dp1=bexpt/000144381518606856ff78d2^pbf/%232000000000000000080000000000457f01292^u1p/QEBfX0BAX19AQA**57f01292^bl/GB59d14612^; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: ns1=BAQAAAVAl2SF5AAaAAKUADVfwEpIxMDMwNzQ4MzkxLzA7WNxj4Uf+Wq8QtyY+nOtms5h8YEk*; domain=.ebay.co.uk; path=/; HttpOnly; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: cssg=2a175dab1500a7e04b1197b7fffeb4fe; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: s=BAQAAAVAl2SF5AAWAAPgAIFYQMJIyYTE3NWRhYjE1MDBhN2UwNGIxMTk3YjdmZmZlYjRmZQASAApWEDCSdGVzdENvb2tpZQ4QCvaY05CFXvE5lE35YVDKsRxO; domain=.ebay.co.uk; path=/; HttpOnly; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: nonsession=CgADKACBfdOCSMmEwZTlhYTgxNTAwYTM1ODI4MTQ1OWRlZmZmNTdmOGQAywABVg7mGjKjvPxL; domain=.ebay.co.uk; path=/; Secure
about:blank : Unable to run script because scripts are blocked internally. <unknown>
Blocking reflected script inclusion origin XSS from https://signin.ebay.co.uk/ws/eBayISAPI. ... FWatchList: https://www.paypalobjects.com/webstatic ... .pp.min.js
embedded by
https://c.paypal.com/v1/r/d/i?js_src=ht ... .pp.min.js
about:blank : Unable to run script because scripts are blocked internally. <unknown>
[NoScript HTTPS] AUTOMATIC SECURE on https://b.stats.paypal.com: c=cf16709463b829311f13; domain=.stats.paypal.com; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://b.stats.paypal.com: session=eyJxIjp7InIiOiJjRDB5WVRCbE9XRmhPREUxTURCaE16VTRNamd4TkRVNVpHVm1abVkxTjJZNFpDWnBQVGd4TGpFM01TNDVOeTR4TURFbWREMHhORFF6T0RFMU1UZzJKbUU5TWpCeUpFdmRzWFVtR1pxd3BFMXRKZmJuXzRXa1VBPT0ifSwidiI6MX0.CPBwkw.P5LwDHoj2k_a3KuA4TPP6_DYdMc; domain=.stats.paypal.com; path=/; HttpOnly; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.com: ebay=%5Ecv%3D15555%5Esbf%3D%23%5E; domain=.ebay.com; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.com: dp1=bu1p/QEBfX0BAX19AQA**57f01294^bl/GB59d14614^; domain=.ebay.com; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.com: s=CgAD4ACBWEDCUMmExMjQ1MjExNTAwYTYyMzA0NTRkY2U0ZmZjNjY1ZGSMY4nW; domain=.ebay.com; path=/; HttpOnly; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.com: nonsession=CgADKACBfdOCUMmExMjQ1MjExNTAwYTYyMzA0NTRkY2U0ZmZjNjY1ZGUAywABVg7mHDQKC+Oh; domain=.ebay.com; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://slc.stats.paypal.com: c=cf16709463b829311f13; domain=.stats.paypal.com; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://slc.stats.paypal.com: session=; domain=.stats.paypal.com; path=/; Secure
Last edited by barbaz on Fri Jun 24, 2016 9:19 pm, edited 2 times in total.
Reason: kill board-generated links try 2 (oops)
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 5.1; rv:43.0) Gecko/20100101 SeaMonkey/2.40
barbaz
Senior Member
Posts: 10841
Joined: Sat Aug 03, 2013 5:45 pm

Re: How to Login to eBay with NoScript

Post by barbaz »

therube wrote:Blocking reflected script inclusion origin XSS from https://signin.ebay.co.uk/ws/eBayISAPI. ... FWatchList: https://www.paypalobjects.com/webstatic ... .pp.min.js
embedded by
https://c.paypal.com/v1/r/d/i?js_src=ht ... .pp.min.js
If it's really XSS issue, and not automatic secure cookie management, this is the relevant console message. Unfortunately it got too cut off for us to assess the situation properly.

To confirm whether this is really the problem, as a test - and this is only a test, *not* a potential solution - try setting about:config > noscript.xss.checkInclusions to false
*Always* check the changelogs BEFORE updating that important software!
-
Post Reply