[Resolved] Wall Street Journal

General discussion about the NoScript extension for Firefox
Post Reply
plkwas
Posts: 5
Joined: Thu Apr 25, 2013 4:37 pm

[Resolved] Wall Street Journal

Post by plkwas » Tue Aug 05, 2014 6:40 pm

Can someone please tell me what I need to do to stop this error message and to stop no script from doing whatever it is doing in this case.

NoScript filtered a potential cross-site scripting (XSS) attempt from [http://online.wsj.com]. Technical details have been logged to the Console.


I have tried every suggestion of yours that I understand and nothing works.

Thank you for your help.

Phil King
Mozilla/5.0 (Windows NT 5.1; rv:32.0) Gecko/20100101 Firefox/32.0

User avatar
therube
Ambassador
Posts: 7608
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: Wall Street Journal

Post by therube » Tue Aug 05, 2014 7:03 pm

Can you post the related Error Console message.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 5.1; rv:29.0) Gecko/20100101 SeaMonkey/2.26.1

plkwas
Posts: 5
Joined: Thu Apr 25, 2013 4:37 pm

Re: Wall Street Journal

Post by plkwas » Wed Aug 06, 2014 3:03 pm

'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137
usingOldMemoryReporter err=TypeError: Cc['@mozlla.org/memory-reporter-manager;1'] is undefined
'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137
'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137
'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137
DJ JSFirstExec: itp:2543
"[ begin jsfirstexec ]" itp:2543
"[ end jsfirstexec ]" itp:2552
Synchronous XMLHttpRequest on the main thread is deprecated because of its detrimental effects to the end user's experience. For more help http://xhr.spec.whatwg.org/ j_global_slim-static.js:36
usingOldMemoryReporter err=TypeError: Cc['@mozlla.org/memory-reporter-manager;1'] is undefined
'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137
Use of getUserData() or setUserData() is deprecated. Use WeakMap or element.dataset instead. cacheobj.js:829
Using //@ to indicate sourceURL pragmas is deprecated. Use //# instead j_global_slim-static.js:4
DJ JSExec: itp:2562
"[ begin jsexec ]" itp:2562
"[ end jsexec ]" itp:2632
"require script has executed" script.js:2
"oCnt is null" 20140403184327.js:3104
mutating the [[Prototype]] of an object will cause your code to run very slowly; instead create the object with the correct initial [[Prototype]] value using Object.create main.js:380
mutating the [[Prototype]] of an object will cause your code to run very slowly; instead create the object with the correct initial [[Prototype]] value using Object.create script-compiler.js:100
"pageLoaded host:online.wsj.com nodeName:#document" heartbleed.js:108
"site result:1" heartbleed.js:185
Use of Mutation Events is deprecated. Use MutationObserver instead. script-compiler.js:140
'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137
'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137
TypeError: content_document.location is undefined rdb.firefox.overlay.js:76
syntax error infinite_scrolling_rules.json:1
"Porthole: Using built-in browser support" lifp_prod.js:338
TypeError: content_document.location is undefined rdb.firefox.overlay.js:76
'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137
'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137
Use of getPreventDefault() is deprecated. Use defaultPrevented instead. jquery.js:3527
'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137
'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137
[NoScript InjectionChecker] JavaScript Injection in coalesced:///site/4454ret=html&limit=10&r=3003&phint=serverDomain=online.wsj.com, primaryProduct=Online Journal, pageName=WSJ_ITP_pageone, section=WSJ_ITP, articleType=WSJ_Summaries_WSJ_ITP_pageone, subSection=WSJ_ITP_ITP US, contentType=summaries, encryptedUUID=V1-cHBsbGtr, contentChannel=Summaries, isSub=WSJ_reg_yes, edition=Edition_North_America_USA, subsection=WSJ_ITP, __bk_k=In Today's Paper - Wsj.com
(function anonymous() {
serverDomain=online.wsj.com, primaryProduct=Online /* COMMENT_TERMINATOR */
DUMMY_EXPR
})
[NoScript XSS] Sanitized suspicious request. Original URL [http://tags.bluekai.com/site/4454?ret=html&limit=10&r=3003&phint=serverDomain%3Donline.wsj.com&phint=primaryProduct%3DOnline%20Journal&phint=pageName%3DWSJ_ITP_pageone&phint=section%3DWSJ_ITP&phint=articleType%3DWSJ_Summaries_WSJ_ITP_pageone&phint=subSection%3DWSJ_ITP_ITP%20US&phint=contentType%3Dsummaries&phint=encryptedUUID%3DV1-cHBsbGtr&phint=contentChannel%3DSummaries&phint=isSub%3DWSJ_reg_yes&phint=edition%3DEdition_North_America_USA&phint=subsection%3DWSJ_ITP&phint=__bk_k%3DIn%20Today%27s%20Paper%20-%20Wsj.com] requested from [http://online.wsj.com/itp?_nocache=1306511171074&mg=com-wsj]. Sanitized URL: [http://tags.bluekai.com/site/4454?ret=html&limit=10&r=3003&phint=serverDomain%20online.wsj.com&phint=primaryProduct%20Online%20Journal&phint=pageName%20WSJ_ITP_pageone&phint=section%20WSJ_ITP&phint=articleType%20WSJ_Summaries_WSJ_ITP_pageone&phint=subSection%20WSJ_ITP_ITP%20US&phint=contentType%20summaries&phint=encryptedUUID%20V1-cHBsbGtr&phint=contentChannel%20Summaries&phint=isSub%20WSJ_reg_yes&phint=edition%20Edition_North_America_USA&phint=subsection%20WSJ_ITP&phint=__bk_k%20In%20Today%20s%20Paper%20-%20Wsj.com#1701273188921334973].
TypeError: content_document.location is undefined rdb.firefox.overlay.js:76
mutating the [[Prototype]] of an object will cause your code to run very slowly; instead create the object with the correct initial [[Prototype]] value using Object.create script-compiler.js:100
Use of Mutation Events is deprecated. Use MutationObserver instead. script-compiler.js:140
'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137
usingOldMemoryReporter err=TypeError: Cc['@mozlla.org/memory-reporter-manager;1'] is undefined
'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137
Mozilla/5.0 (Windows NT 5.1; rv:32.0) Gecko/20100101 Firefox/32.0

barbaz
Senior Member
Posts: 9520
Joined: Sat Aug 03, 2013 5:45 pm

Re: Wall Street Journal

Post by barbaz » Wed Aug 06, 2014 4:39 pm

Bluekai is a tracker. I don't know if anything actually malicious is happening here, but I would suggest you leave that XSS warning alone and thank NoScript for potentially saving you.
If you don't want to see any user-facing warning, it would be best to outright block that request: try adding to NoScript Options -> Advanced -> ABE -> USER

Code: Select all

Site .bluekai.com
Deny

Does that help, or does it result in you getting a different user-facing warning?
*Always* check the changelogs BEFORE updating that important software!
Mozilla/5.0 (X11; OpenBSD amd64; rv:26.0) Gecko/20100101 Firefox/26.0 SeaMonkey/2.23

plkwas
Posts: 5
Joined: Thu Apr 25, 2013 4:37 pm

Re: Wall Street Journal

Post by plkwas » Wed Aug 06, 2014 5:12 pm

I blocked blukai, and the rest of the trackers, on the drop-down menu and that seems to solve the problem.

Thank you very much.

Phil
Mozilla/5.0 (Windows NT 5.1; rv:32.0) Gecko/20100101 Firefox/32.0

Post Reply