NS filtered XSS attempt from securesuite.net

Ask for help about NoScript, no registration needed to post
kukla
Senior Member
Posts: 321
Joined: Mon May 04, 2009 12:08 am

NS filtered XSS attempt from securesuite.net

Post by kukla »

Got the above notice from NoScript while ordering from newegg.com (https). NS message said it was writing it to Console, but can't find it there.

Do you know what could have been happening, and anything about securesuite.net and XSS? Thanks.
Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10.4; en-US; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3
kukla
Senior Member
Posts: 321
Joined: Mon May 04, 2009 12:08 am

Re: NS filtered XSS attempt from securesuite.net

Post by kukla »

I have a basic understanding of what XSS means. I guess what I'm really asking is if you have heard anything about securesuite.net and what it might have been doing while I was logged in with https, and in the process of completing a purchase with credit card info. I suppose I should notify Newegg.
Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10.4; en-US; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3
kukla
Senior Member
Posts: 321
Joined: Mon May 04, 2009 12:08 am

Re: NS filtered XSS attempt from securesuite.net

Post by kukla »

I have a basic understanding of what XSS means. I guess what I'm really asking is if you have heard anything about securesuite.net and what it might have been doing while I was logged in with https, and in the process of completing a purchase with credit card info. I suppose I should notify Newegg. I did a google on that site, but can't come up with anything conclusive about their activites.

Did NS mean the Firefox error console or the Mac console, where I often see NS entries? Looked in the FF one and still don't see that entry.
Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10.4; en-US; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: NS filtered XSS attempt from securesuite.net

Post by Giorgio Maone »

You should find a line starting with [NoScript XSS] in Tools|Error Console just after you get the warning.
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3 (.NET CLR 3.5.30729)
kukla
Senior Member
Posts: 321
Joined: Mon May 04, 2009 12:08 am

Re: NS filtered XSS attempt from securesuite.net

Post by kukla »

Any idea exactly what NS may have been preventing by filtering this? Phishing, data theft? Are all the XSS attempts that NS catches exploits of one kind or another? Do any have any legitimate purposes? Heard of this one? Thanks.
Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10.4; en-US; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: NS filtered XSS attempt from securesuite.net

Post by Giorgio Maone »

kukla wrote:Any idea exactly what NS may have been preventing by filtering this?
It might be a false positive or a real issue.
No way to tell it without looking at the actual message.
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3 (.NET CLR 3.5.30729)
kukla
Senior Member
Posts: 321
Joined: Mon May 04, 2009 12:08 am

Re: NS filtered XSS attempt from securesuite.net

Post by kukla »

Giorgio Maone wrote:
kukla wrote:Any idea exactly what NS may have been preventing by filtering this?
It might be a false positive or a real issue.
No way to tell it without looking at the actual message.
No dice then. It's gone. Anyway, thanks to NoScript it didn't get through, whatever it was.
Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10.4; en-US; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3
Post Reply