Problem with XSS scripts

Ask for help about NoScript, no registration needed to post
Burgerboy524

Problem with XSS scripts

Post by Burgerboy524 »

Ever since I upgraded NoScript to version 1.9.9.11, it started blocking XSS scripts from my igoogle webpage, saying "NoScript filtered a potential cross-site scripting (XSS) attempt from [http://ig.gmodules.com]. Technical details have been logged to the Console." And the console's last entry as:
Error: not well-formed
Source File:
Line: 1, Column: 48
Source Code:
<body xmlns="http://www.w3.org/1999/xhtml">&css=http ... ver-card</
I tried putting http://ig.gmodules into the exemption list in the options but the problem still happens. Can anyone help?
Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3
User avatar
therube
Ambassador
Posts: 7969
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: Problem with XSS scripts

Post by therube »

I don't think that is the particular error needed.

Look through here, Facebook Google Gadget & it may give you a clue as to the domain needed for the exception.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.5pre) Gecko/20091023 SeaMonkey/2.0.1pre
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: Problem with XSS scripts

Post by Giorgio Maone »

Next time it happens please check Tools|Error Console for Messages (the ones with the blue icon) starting with [NoScript XSS].
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3 (.NET CLR 3.5.30729)
Post Reply