xss attempt from chrome: blocked?

[lanzz]

noscript has started to alert me that a possible xss attempt from [chrome:] has been blocked each time i do a keyword search from the location bar. i have tried to whitelist "^chrome:" in the xss section of the prefs, which had absolutely no effect, even though the pattern test field indicates all chrome: urls are matched by the whitelist. anyone else seeing this? what am i doing wrong?

[Giorgio Maone]

Could you show me the [NoScript XSS] lines you should get in Tools|Error Console when this happens?

[Giorgio Maone]

P.S.: the correct way to whitelist an origin for XSS checks is premetting "@" to its scheme, like

Code: Select all

^@chrome:

or

Code: Select all

^@https://some.trusted.origin.com/

Your exception was whitelisting chrome://* as a target.