InformAction Forums

NoScripters and WebSec nerds of all lands, unite!
https://forums.informaction.com/

How to Login to eBay with NoScript

https://forums.informaction.com/viewtopic.php?t=19509

Page 1 of 1

How to Login to eBay with NoScript

Posted: Sat Apr 05, 2014 2:09 pm
by BigMadRab
Does anyone know how to Login to eBay with NoScript? If I allow XSS I get to a redirection page however that quickly relodes and loops back to the original login page.

Any help would be greatly appreciated.

Re: How to Login to eBay with NoScript

Posted: Mon Apr 07, 2014 4:15 am
by Thrawn
Can you copy the XSS message from the Browser Console (Ctrl+Shift+J) and paste it here?

If the spam filter blocks you, then please send it to a moderator via private message.

Re: How to Login to eBay with NoScript

Posted: Fri Oct 02, 2015 7:44 pm
by robdc
I am having the same problem. Whenever I try to log in it loops back to the login page, I will try to message a mod

Re: How to Login to eBay with NoScript

Posted: Sun Oct 11, 2015 4:20 pm
by barbaz
robdc wrote:I will try to message a mod
Have they helped you to a solution? If so can you please post the solution here for others with this problem to reference?

Re: How to Login to eBay with NoScript

Posted: Fri Jun 24, 2016 11:09 am
by robdc
barbaz wrote:
robdc wrote:I will try to message a mod
Have they helped you to a solution? If so can you please post the solution here for others with this problem to reference?
I forgot all about this and just suffered with the persisting issue, but it's starting to infuriate me again. I never heard back from the mod I messaged, so I have just messaged another on.

Re: How to Login to eBay with NoScript

Posted: Fri Jun 24, 2016 3:10 pm
by barbaz
No one should ever have to wait that long for a response from a Moderator ("green user") for something like this.

@robdc: see PM

Re: How to Login to eBay with NoScript

Posted: Fri Jun 24, 2016 8:51 pm
by therube
robdc wrote: I sent this message to another mod several months ago...

The Browser Console says:

[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: ds1=ats/1443815184428; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: ds2=asotr/b7qefz8wzN_z^; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: ebay=%5Ecv%3D15555%5Esin%3Din%5Ejs%3D1%5EsfLMD%3D1388925412%5Esbf%3D%231000040000004%5Ecos%3D1%5E; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: dp1=bexpt/000144381486912456ff7795^pcid/98755244257f01290^a1p/056103090^bl/GB59d14610^fm/5.3.256366c10^kms/in59d14610^pbf/%2380800000000457f01290^mpc/9%7C356366c10^tzo/-3c560eed20^exc/0%3A0%3A0%3A056366c10^u1p/cm9iLWRj57f01290^u1f/Robert57f01290^; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: ns1=BAQAAAVAl2SF5AAaAAKUADVfwEpAxMDMwNzQ4MzkxLzA7De1oFQdAaj7P5O2V5zzzlmnClvE*; domain=.ebay.co.uk; path=/; HttpOnly; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: cssg=2a12876b1500a7ec736586f2ffffa76c; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: s=BAQAAAVAl2SF5AAWAABEAC1YO48AwMDAwMHJvYi1kYwABAAZWEDCQcm9iLWRjABIAClYQMJB0ZXN0Q29va2llAAMABVYQMJAxNjM4NAD0ACJWEDCQJDIkUFJJZGliOHIkMlhaOVBoNEROTkpDd0RtdmNwLzVvMAFlAAJWEDCQIzIBRQAIV/ASkDUzODRjYmYxAAYAAVYQMJA1AKgAAVYQMJAxAPgAIFYQMJAyYTEyODc2YjE1MDBhN2VjNzM2NTg2ZjJmZmZmYTc2YwAMAApWEDCQMTAzMDc0ODM5MQA9AAZWEDCQcm9iLWRjSbTZ1wMpBftHhzXuTu9oxxNVnk4*; domain=.ebay.co.uk; path=/; HttpOnly; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: nonsession=BAQAAAVAl2SF5AAaAAEAABlfwEpByb2ItZGMAEAAGV/ASkHJvYi1kYwAzAAxX8BKQdG4yNCA4YmIsR0JSAPMAIlfwEpAkMiRQUklkaWI4ciQyWFo5UGg0RE5OSkN3RG12Y3AvNW8wAWQAA1fwEpAjOGEABAAGV/ASkHJvYi1kYwCqAAFX8BKQMwDKACBfdOCQMmEwZTlhYTgxNTAwYTM1ODI4MTQ1OWRlZmZmNTdmOGQAmgAHVhGCEHJvYi1kY2oAywABVg7mGDMAnAA4V/ASkG5ZK3NIWjJQckJtZGo2d1ZuWStzRVoyUHJBMmRqNkFFazRLbURKaUJxQTJkajZ4OW5ZK3NlUT09AJ0ACFfwEpAwMDAwMDAwMF8s5gMPhZ5vWYg9rruJXlK0Irsl; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: shs=BAQAAAVAl2SF5AAaAAVUADlfwEpA2NjM2MjM0MzEwMDEsM7mCqiJjUuiVHwGjpLfQueqgFnOe; domain=.ebay.co.uk; path=/; HttpOnly; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://reg.ebay.co.uk: ebay=%5EsfLMD%3D1388925412%5Esin%3Din%5Esbf%3D%231000040000004%5Ecos%3D1%5Ecv%3D15555%5Ejs%3D1%5E; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://reg.ebay.co.uk: ns1=BAQAAAVAl2SF5AAaAAKUADVfwEpExMDMwNzQ4MzkxLzA7YVypcjfA6VvIHp3DUmKS35Uk0rM*; domain=.ebay.co.uk; path=/; HttpOnly; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://reg.ebay.co.uk: dp1=bkms/in59d14611^u1f/Robert57f01291^tzo/-3c560eed21^exc/0%3A0%3A0%3A056366c11^fm/5.3.256366c10^pcid/98755244257f01291^mpc/9%7C3561c0e11^a1p/056103091^u1p/cm9iLWRj57f01291^bl/GB59d14611^expt/000144381486912456ff7795^pbf/%2380800000000457f01291^; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://reg.ebay.co.uk: s=BAQAAAVAl2SF5AAWAAAwAClYQMJExMDMwNzQ4MzkxAPgAIFYQMJEyYTEyODc2YjE1MDBhN2VjNzM2NTg2ZjJmZmZmYTc2YwAGAAFWEDCRNQFlAAJWEDCRIzIAEgAKVhAwkXRlc3RDb29raWUAPQAGVhAwkXJvYi1kYwFFAAhX8BKRNTM4NGNiZjEAEQALVg7jwDAwMDAwcm9iLWRjAKgAAVYQMJAxAPQAIlYQMJEkMiRQUklkaWI4ciQyWFo5UGg0RE5OSkN3RG12Y3AvNW8wAAEABlYQMJByb2ItZGMAAwAFVhAwkTE2Mzg0hyDUI5HAZNPOLgcPQVHPNXQ3q/U*; domain=.ebay.co.uk; path=/; HttpOnly; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://reg.ebay.co.uk: nonsession=BAQAAAVAl2SF5AAaAAJ0ACFfwEpEwMDAwMDAwMACqAAFX8BKRMwFkAANX8BKRIzhhADMADFfwEpF0bjI0IDhiYixHQlIAywABVg7mGTQAmgAHVhGCEHJvYi1kY2oAQAAGV/ASkXJvYi1kYwAQAAZX8BKRcm9iLWRjAMoAIF904JEyYTBlOWFhODE1MDBhMzU4MjgxNDU5ZGVmZmY1N2Y4ZADzACJX8BKRJDIkUFJJZGliOHIkMlhaOVBoNEROTkpDd0RtdmNwLzVvMAAEAAZX8BKQcm9iLWRjAJwAOFfwEpFuWStzSFoyUHJCbWRqNndWblkrc0VaMlByQTJkajZBRWs0S21ESmlCcUEyZGo2eDluWStzZVE9PXFZdVuNoLceVv7fxvEga9KcZ+QL; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: ds1=ats/0; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: ds2=asotr/b7qefz8wzN_z^; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: ebay=%5Ecv%3D15555%5Esbf%3D%23%5E; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: dp1=bexpt/000144381518606856ff78d2^pbf/%232000000000000000080000000000457f01292^u1p/QEBfX0BAX19AQA**57f01292^bl/GB59d14612^; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: ns1=BAQAAAVAl2SF5AAaAAKUADVfwEpIxMDMwNzQ4MzkxLzA7WNxj4Uf+Wq8QtyY+nOtms5h8YEk*; domain=.ebay.co.uk; path=/; HttpOnly; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: cssg=2a175dab1500a7e04b1197b7fffeb4fe; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: s=BAQAAAVAl2SF5AAWAAPgAIFYQMJIyYTE3NWRhYjE1MDBhN2UwNGIxMTk3YjdmZmZlYjRmZQASAApWEDCSdGVzdENvb2tpZQ4QCvaY05CFXvE5lE35YVDKsRxO; domain=.ebay.co.uk; path=/; HttpOnly; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: nonsession=CgADKACBfdOCSMmEwZTlhYTgxNTAwYTM1ODI4MTQ1OWRlZmZmNTdmOGQAywABVg7mGjKjvPxL; domain=.ebay.co.uk; path=/; Secure
about:blank : Unable to run script because scripts are blocked internally. <unknown>
Blocking reflected script inclusion origin XSS from https://signin.ebay.co.uk/ws/eBayISAPI. ... FWatchList: https://www.paypalobjects.com/webstatic ... .pp.min.js
embedded by
https://c.paypal.com/v1/r/d/i?js_src=ht ... .pp.min.js
about:blank : Unable to run script because scripts are blocked internally. <unknown>
[NoScript HTTPS] AUTOMATIC SECURE on https://b.stats.paypal.com: c=cf16709463b829311f13; domain=.stats.paypal.com; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://b.stats.paypal.com: session=eyJxIjp7InIiOiJjRDB5WVRCbE9XRmhPREUxTURCaE16VTRNamd4TkRVNVpHVm1abVkxTjJZNFpDWnBQVGd4TGpFM01TNDVOeTR4TURFbWREMHhORFF6T0RFMU1UZzJKbUU5TWpCeUpFdmRzWFVtR1pxd3BFMXRKZmJuXzRXa1VBPT0ifSwidiI6MX0.CPBwkw.P5LwDHoj2k_a3KuA4TPP6_DYdMc; domain=.stats.paypal.com; path=/; HttpOnly; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.com: ebay=%5Ecv%3D15555%5Esbf%3D%23%5E; domain=.ebay.com; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.com: dp1=bu1p/QEBfX0BAX19AQA**57f01294^bl/GB59d14614^; domain=.ebay.com; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.com: s=CgAD4ACBWEDCUMmExMjQ1MjExNTAwYTYyMzA0NTRkY2U0ZmZjNjY1ZGSMY4nW; domain=.ebay.com; path=/; HttpOnly; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.com: nonsession=CgADKACBfdOCUMmExMjQ1MjExNTAwYTYyMzA0NTRkY2U0ZmZjNjY1ZGUAywABVg7mHDQKC+Oh; domain=.ebay.com; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://slc.stats.paypal.com: c=cf16709463b829311f13; domain=.stats.paypal.com; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://slc.stats.paypal.com: session=; domain=.stats.paypal.com; path=/; Secure

Re: How to Login to eBay with NoScript

Posted: Fri Jun 24, 2016 9:18 pm
by barbaz
therube wrote:Blocking reflected script inclusion origin XSS from https://signin.ebay.co.uk/ws/eBayISAPI. ... FWatchList: https://www.paypalobjects.com/webstatic ... .pp.min.js
embedded by
https://c.paypal.com/v1/r/d/i?js_src=ht ... .pp.min.js
If it's really XSS issue, and not automatic secure cookie management, this is the relevant console message. Unfortunately it got too cut off for us to assess the situation properly.

To confirm whether this is really the problem, as a test - and this is only a test, *not* a potential solution - try setting about:config > noscript.xss.checkInclusions to false
All times are UTC
Page 1 of 1

Powered by phpBB® Forum Software © phpBB Limited