Page 1 of 1
Clear XSS Choices - Button is greyed out
Posted: Thu Feb 15, 2018 9:23 am
by HigherPower
I noticed since 10.1.6.5 that I have not been receiving any XSS pop-ups on sites where occasionally would get them. Also I can't clear out the choices because the button is greyed out. I feel that for some reason that feature is not working properly?
Re: Clear XSS Choices - Button is greyed out
Posted: Thu Feb 15, 2018 12:31 pm
by Giorgio Maone
HigherPower wrote:I noticed since 10.1.6.5 that I have not been receiving any XSS pop-ups on sites where occasionally would get them. Also I can't clear out the choices because the button is greyed out. I feel that for some reason that feature is not working properly?
The button is grayed out it just means all the choices have been cleared.
You're getting less warnings now because 10.1.6.5 removed a whole class of false positives happening because of limitations in the specificity of window.name injections detection which I could overcome leveraging Firefox 58 features.
So, all is good
Re: Clear XSS Choices - Button is greyed out
Posted: Fri Feb 16, 2018 6:36 am
by HigherPower
Ahh gratzi!!
