I have a relatively old noscript_data.txt from 10.6.2 release candidates period backed up with these 2 options: xssScanRequestBody is true and xssBlockUnscannedPOST is false.
I also noticed that a fresh copy of Noscript 10.6.3rc7 doesn't create these options in its configuration json anymore and there is no UI element in NoScript Options page that could set them. If I remember well there were UI elements that controlled those options in 10.6.2 release candidates. Could it be those options were related to the workaround for https://bugzil.la/1532530 that was nuked in 10.6.2 stable? If so do they still have some effect if left alone?
[Answered] What happened with NoScript json options xssBlockUnscannedPOST and xssScanRequestBody
[Answered] What happened with NoScript json options xssBlockUnscannedPOST and xssScanRequestBody
Last edited by pal1000 on Fri Jun 14, 2019 7:50 pm, edited 1 time in total.
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0
Re: Asking about NoScript json options xssBlockUnscannedPOST and xssScanRequestBody
After looking at the commit which removed the workaround, I am quite sure that these options don't have any effect anymore.pal1000 wrote: ↑Fri Jun 14, 2019 10:54 am Could it be those options were related to the workaround for https://bugzil.la/1532530 that was nuked in 10.6.2 stable? If so do they still have some effect if left alone?
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0
- Giorgio Maone
- Site Admin
- Posts: 9454
- Joined: Wed Mar 18, 2009 11:22 pm
- Location: Palermo - Italy
- Contact:
Re: Asking about NoScript json options xssBlockUnscannedPOST and xssScanRequestBody
No, they don't indeed.musonius wrote: ↑Fri Jun 14, 2019 1:06 pmAfter looking at the commit which removed the workaround, I am quite sure that these options don't have any effect anymore.pal1000 wrote: ↑Fri Jun 14, 2019 10:54 am Could it be those options were related to the workaround for https://bugzil.la/1532530 that was nuked in 10.6.2 stable? If so do they still have some effect if left alone?
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:68.0) Gecko/20100101 Firefox/68.0
Re: Asking about NoScript json options xssBlockUnscannedPOST and xssScanRequestBody
Thanks both for answering. It looks like my guess was right. I marked this question topic as answered.
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0