NoScript is incompatible with Evernote again

[7.coolblue]

After this last update to NoScript 1.9.9.69, NoScript started not to work with Evernote web-clipper once again. It's the same old xss error. I tried to add an exception but couldn't get it to work.

[Giorgio Maone]

Do you mean downgrading actually helps?
Could you post here the exact [NoScript XSS] lines you get in Tools|Error Console?

[7.coolblue]

Ok, i noticed this weird thing..

First, here are the exceptions I made:
^evernote.com
^tellapart.com

I have two laptops, one runs Win 7 32-bit and the other Win 7 64-bit.. a 32 bit firefox installed on 32-bit one and a 64 bit firefox on the other..

Evernote web-clipper doesn't have any problem working on 32 bit one.. But it doesn't work and causes XSS error on 64 bit one..

Both have the latest Firefox and NoScript versions. I use the same clipper shortcut from Evernote.com website on both.. Made the above exceptions on both..

Could you please let me know if there's a way to work Evernote clipper as smooth on the 64 bit version too?

[7.coolblue]

Below are the error lines [error lines only, but there are also many other warnings and messages]

Error: MNetReq is not defined
Source File: http://www.milliyet.com.tr/Yasam/SonDak ... yayimlandi
Line: 30

Error: MNetBanner is not defined
Source File: http://www.milliyet.com.tr/Yasam/SonDak ... yayimlandi
Line: 100

Error: MNetBanner is not defined
Source File: http://www.milliyet.com.tr/Yasam/SonDak ... yayimlandi
Line: 110

Error: MNetBanner is not defined
Source File: http://www.milliyet.com.tr/Yasam/SonDak ... yayimlandi
Line: 110

[Giorgio Maone]

I do not need Error (red) lines, I need the Message (white/blue) lines starting with [NoScript XSS].

[7.coolblue]

Code: Select all

[NoScript XSS] Sanitized suspicious upload to [http://www.evernote.com/clip.action§DATA§%3CDIV+class%3D%22controlCover%22+%3E%3CDIV+class%3D%22control%22+%3E%3CUL%3E%3CLI+class%3D%22yazdir%22+%3E%3CA+href%3D%22javascript%3APrintAuthorArticle%281101794%29%3B%22+%3E%3C%2FA%3E%3C%2FLI%3E%3CLI+class%3D%22rss%22+%3E%3CA+href%3D%22http%3A%2F%2Fwww.milliyet.com.tr%2FDefault.aspx%3FaType%3DRss%22+%3ERSS%3C%2FA%3E%3C%2FLI%3E%3CLI+class%3D%22fontS%22+%3E%3CA+href%3D%22javascript%3AfontChange%28true%29%3B%22++class%3D%22big%22+%3EA%3C%2FA%3E%3CA+href%3D%22javascript%3AfontChange%28%29%3B%22++class%3D%22little%22+%3EA%3C%2FA%3E%3CA+href%3D%22javascript%3AfontChange%28true%29%3B%22++class%3D%22arti%22+%3E%2B%3C%2FA%3E%3CA+href%3D%22javascript%3AfontChange%28%29%3B%22++class%3D%22eksi%22+%3E-%3C%2FA%3E%3C%2FLI%3E%3C%2FUL%3E%3C%2FDIV%3E%3CDIV+style%3D%22z-index%3A+9999%3B%22++class%3D%22habertopwrappper2%22+%3E%3CDIV+class%3D%22paylasdetay%22+%3E%3CUL%3E%3CLI%3E%3CA+href%3D%22javascript%3AmakeURL%281%29%3B%22+%3E%3CIMG+width%3D%2225%22++src%3D%22%2Fd%2Fi%2F01%2Fpaylasiconlar%2Ffacebook.png%22+%3E%3C%2FIMG%3E%3C%2FA%3E%3C%2FLI%3E%3CLI%3E%3CA+href%3D%22javascript%3AshareTwitter%281101794%29%3B%22+%3E%3CIMG+width%3D%2225%22++src%3D%22%2Fd%2Fi%2F01%2Fpaylasiconlar%2Ftwitter.png%22+%3E%3C%2FIMG%3E%3C%2FA%3E%3C%2FLI%3E%3CLI%3E%3CA+href%3D%22javascript%3AmakeURL%2811%29%3B%22+%3E%3CIMG+width%3D%2225%22++src%3D%22%2Fd%2Fi%2F01%2Fpaylasiconlar%2Ffriendfeed.png%22+%3E%3C%2FIMG%3E%3C%2FA%3E%3C%2FLI%3E%3CLI+class%3D%22myS%22+%3E%3C%2FLI%3E%3CLI+class%3D%22down%22+%3E%3CA+href%3D%22javascript%3ASwitchUL%28%27ul1%27%2C%27img1%27%29%22+%3E%3CIMG+height%3D%2224%22++id%3D%22img1%22++src%3D%22%2Fd%2Fi%2F01%2Fpaylasiconlar%2Fdownbutton_sondak.jpg%22+%3E%3C%2FIMG%3E%3C%2FA%3E%3C%2FLI%3E%3C%2FUL%3E%3CUL+style%3D%22display%3A+none%3B%22++id%3D%22ul1%22+%3E%3CLI%3E%3CA+href%3D%22javascript%3AmakeURL%282%29%3B%22+%3E%3CIMG+src%3D%22%2Fd%2Fi%2F01%2Fpaylasiconlar%2Fgoogle.png%22+%3E%3C%2FIMG%3E%3C%2FA%3E%3C%2FLI%3E%3CLI%3E%3CA+href%3D%22javascript%3AmakeURL%2810%29%3B%22+%3E%3CIMG+src%3D%22%2Fd%2Fi%2F01%2Fpaylasiconlar%2Fmyspace.png%22+%3E%3C%2FIMG%3E%3C%2FA%3E%3C%2FLI%3E%3CLI%3E%3CA+href%3D%22javascript%3AmakeURL%283%29%3B%22+%3E%3CIMG+width%3D%2224%22++height%3D%2224%22++src%3D%22%2Fd%2Fi%2F01%2Fpaylasiconlar%2Fyahoo.png%22+%3E%3C%2FIMG%3E%3C%2FA%3E%3C%2FLI%3E%3CLI%3E%3CA+href%3D%22javascript%3AmakeURL%288%29%3B%22+%3E%3CIMG+src%3D%22%2Fd%2Fi%2F01%2Fpaylasiconlar%2Freddit.png%22+%3E%3C%2FIMG%3E%3C%2FA%3E%3C%2FLI%3E%3CLI%3E%3CA+href%3D%22javascript%3AmakeURL%284%29%3B%22+%3E%3CIMG+src%3D%22%2Fd%2Fi%2F01%2Fpaylasiconlar%2Fmixx.png%22+%3E%3C%2FIMG%3E%3C%2FA%3E%3C%2FLI%3E%3CLI%3E%3CA+href%3D%22javascript%3AmakeURL%285%29%3B%22+%3E%3CIMG+src%3D%22%2Fd%2Fi%2F01%2Fpaylasiconlar%2Fdigg.png%22+%3E%3C%2FIMG%3E%3C%2FA%3E%3C%2FLI%3E%3CLI%3E%3CA+href%3D%22javascript%3AmakeURL%287%29%3B%22+%3E%3CIMG+width%3D%2224%22++height%3D%2224%22++src%3D%22%2Fd%2Fi%2F01%2Fpaylasiconlar%2Fdelicious.png%22+%3E%3C%2FIMG%3E%3C%2FA%3E%3C%2FLI%3E%3CLI%3E%3CA+href%3D%22javascript%3AmakeURL%286%29%3B%22+%3E%3CIMG+src%3D%22%2Fd%2Fi%2F01%2Fpaylasiconlar%2Fstumbleupon.png%22+%3E%3C%2FIMG%3E%3C%2FA%3E%3C%2FLI%3E%3CLI%3E%3CA+href%3D%22javascript%3AmakeURL%2812%29%3B%22+%3E%3CIMG+src%3D%22%2Fd%2Fi%2F01%2Fpaylasiconlar%2Fazbuz.png%22+%3E%3C%2FIMG%3E%3C%2FA%3E%3C%2FLI%3E%3C%2FUL%3E%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV+class%3D%22yazarBox%22+%3E%3CDIV+class%3D%22box%22+%3E%3CIMG+width%3D%2265%22++src%3D%22http%3A%2F%2Fi.milliyet.com.tr%2FYazarResimleri%2Ffft6_mf2287.Jpeg%22+%3E%3C%2FIMG%3E%3CSPAN%3E%3CSTRONG%3ESerpil+Y%26%23305%3Blmaz+%3C%2FSTRONG%3ESobe%3C%2FSPAN%3E%3CA+href%3D%22mailto%3Asyilmaz%40milliyet.com.tr%22+%3Esyilmaz%40milliyet.com.tr%3C%2FA%3E%3CSPAN+class%3D%22date%22+%3E%3C%2FSPAN%3E%3CDIV+class%3D%22cls%22+%3E%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV+class%3D%22conTitle%22+%3E%3CH1+id%3D%22divAdnetKeyword%22+%3EK%26%23252%3Brt+petrol%26%23252%3B+sahneye+%26%23231%3B%26%23305%3Bkt%26%23305%3B%3C%2FH1%3E%3CH2+id%3D%22divAdnetKeyword2%22+%3E%3C%2FH2%3E%3CP+class%3D%22date%22+%3E02+Haziran+2009%3C%2FP%3E%3C%2FDIV%3E%3CDIV+class%3D%22content%22+%3E%3CDIV+class%3D%22contRight%22+%3E%3C%2FDIV%3E%3CDIV+class%3D%22contLeft%22+%3E%3CDIV+id%3D%22divAdnetKeyword3%22++class%3D%22icerik%22+%3E%3CP%3E%3CIMG+src%3D%22http%3A%2F%2Fi.milliyet.com.tr%2FGazeteHaberIciResim%2F2009%2F06%2F01%2Ffft16_mf258268.Jpeg%22+%3E%3C%2FIMG%3E%3CBR%3E%3C%2FBR%3E%3CBR%3E%3C%2FBR%3EIrak+B%26%23246%3Blgesel+Y%26%23246%3Bnetimi%26%238217%3Bnin+ba%26%23351%3Bkenti+Erbil%26%238217%3Bdeyiz.+Sahneye+canl%26%23305%3B+ba%26%23287%3Blant%26%23305%3B+yap%26%23305%3Bl%26%23305%3Byor%3B+ekranda+Kurmala+petrol+ihra%26%23231%3B+tesisleri+beliriyor.+Irak+Cumhurba%26%23351%3Bkan%26%23305%3B+Celal+%3CA+class%3D%22tag%22++target%3D%22_blank%22++href%3D%22http%3A%2F%2Fwww.milliyet.com.tr%2Findex%2FTalabani%22+%3ETalabani%3C%2FA%3E+ve+%3CA+class%3D%22tag%22++target%3D%22_blank%22++href%3D%22http%3A%2F%2Fwww.milliyet.com.tr%2Findex%2FKuzey+Irak%22+%3EKuzey+Irak%3C%2FA%3E+B%26%23246%3Blge+Y%26%23246%3Bnetimi+Ba%26%23351%3Bkan%26%23305%3B+%3CA+class%3D%22tag%22++target%3D%22_blank%22++href%3D%22http%3A%2F%2Fwww.milliyet.com.tr%2Findex%2FMesud+Barzani%22+%3EMesud+Barzani%3C%2FA%3E+sahnede+temsili+boru+hatt%26%23305%3Bn%26%23305%3Bn+vanas%26%23305%3Bn%26%23305%3B+a%26%23231%3Barken%2C+Kurmala%26%238217%3Bda+ger%26%23231%3Be%26%23287%3Bi+ya%26%23351%3Ban%26%23305%3Byor.%3CBR%3E%3C%2FBR%3EIrak+%26%238220%3BPetrol+Yasas%26%23305%3B%2C+Federal+H%26%23252%3Bk%26%23252%3Bmet+Meclisi%26%238217%3Bnden+%26%23231%3B%26%23305%3Bkmadan%2C+Takwe+ve+Taq+Taq+sahalar%26%23305%3Bndaki+petrol%26%23252%3Bn+ihracat%26%23305%3Bna+olanak+veren+pragmatik+%26%23231%3B%26%23246%3Bz%26%23252%3Bm%26%23252%3Bn+bulunmas%26%23305%3B+g%26%23246%3Brkemli+bir+tiyatrodan+ibaret+olabilir+mi%3F%3CBR%3E%3C%2FBR%3ESoruyu+Erbil+H%26%23252%3Bk%26%23252%3Bmeti%26%238217%3Bnin+%3CA+class%3D%22tag%22++target%3D%22_blank%22++href%3D%22http%3A%2F%2Fwww.milliyet.com.tr%2Findex%2FBakanlar+Kurulu%22+%3EBakanlar+Kurulu%3C%2FA%3E+Dan%26%23305%3B%26%23351%3Bman%26%23305%3B+Dr.+Halid+Salih%2C+%26%238220%3BL%26%23252%3Btfen+%26%23351%3B%26%23252%3Bphe+yerine%2C+mutluluk+payla%26%23351%3B%26%23305%3Bn%26%238221%3B+s%26%23246%3Bzleriyle+yan%26%23305%3Btl%26%23305%3Byor.%3CBR%3E%3C%2FBR%3E1+Haziran+itibariyle+Irak%26%238217%3B%26%23305%3Bn+ulusal+petrol+boru+hatt%26%23305%3B+Kerk%26%23252%3Bk-%3CA+class%3D%22tag%22++target%3D%22_blank%22++href%3D%22http%3A%2F%2Fwww.milliyet.com.tr%2Findex%2FCeyhan%22+%3ECeyhan%3C%2FA%3E%26%238217%3Bdan+ilk+a%26%23351%3Bamada+g%26%23252%3Bnde+100+bin+%3CA+class%3D%22tag%22++target%3D%22_blank%22++href%3D%22http%3A%2F%2Fwww.milliyet.com.tr%2Findex%2Fvaril%22+%3Evaril%3C%2FA%3E%2C+4+y%26%23305%3Bl+sonra+da+g%26%23252%3Bnde+1+milyon+varil+Kuzey+Irak+petrol%26%23252%3B+d%26%23252%3Bnya+piyasalar%26%23305%3Bna+pompalanacak.%3CBR%3E%3C%2FBR%3EKuzey+Irak+Petrol+Bakani+Asti+Hawrami%2C+%26%238220%3B1+y%26%23305%3Blda+2+milyar+dolar%3B+4+y%26%23305%3Blda+ise+20+milyar+dolar+petrol+geliri+hedefliyoruz%26%238221%3B+diyor.+Yan%26%23305%3B+s%26%23305%3Bra+Taq+Taq+ve+Takwe+sahalar%26%23305%3Bnda+ortakl%26%23305%3B%26%23287%3B%26%23305%3B+bulunan+Genel+Enerji%2C+b%26%23246%3Blgede+altyap%26%23305%3B%2C+e%26%23287%3Bitim+ve+sa%26%23287%3Bl%26%23305%3B%26%23287%3Ba+1.1+milyar+dolarl%26%23305%3Bk+yat%26%23305%3Br%26%23305%3Bm+vaat+ediyor.%3C%2FP%3E%3CP%3E%3CSTRONG%3EZenginlik+Irak+halk%26%23305%3Bn%26%23305%3Bn%3C%2FSTRONG%3E%3CBR%3E%3C%2FBR%3EIrak%26%238217%3B%26%23305%3Bn+devrik+lideri+Saddam%26%238217%3Ba+kar%26%23351%3B%26%23305%3B+ayr%26%23305%3B+kamplarda+s%26%23252%3Brd%26%23252%3Br%26%23252%3Blen%2C+%26%238220%3BK%26%23252%3Brt+davas%26%23305%3Bn%26%23305%3Bn%26%238221%3B+iki+komutan%26%23305%3B+d%26%23252%3Bn+yeni+kimlikleri+ve+yeni+b%26%23246%3Blgesel+rolleriyle+petrol+vanas%26%23305%3Bn%26%23305%3B+a%26%23231%3Bt%26%23305%3Blar.+T%26%23252%3Brk+firmas%26%23305%3B+Yenig%26%23252%3Bn%26%238217%3B%26%23252%3Bn+in%26%23351%3Ba+etti%26%23287%3Bi+Kongre+Saray%26%23305%3B+tarihi+bir+g%26%23252%3Bne+tan%26%23305%3Bkl%26%23305%3Bk+ediyor.+Talabani+ile+Barzani%26%238217%3Bnin+konu%26%23351%3Bmalar%26%23305%3Bn%26%23305%3B+dikkatle+izleyenlerin+ba%26%23351%3B%26%23305%3Bnda+petrol+arama+ruhsat%26%23305%3B+imzalayan+20%26%238217%3Bnin+%26%23252%3Bzerindeki+yabanc%26%23305%3B+%26%23351%3Birketin+y%26%23246%3Bneticileri+geliyordu.%3CBR%3E%3C%2FBR%3ETalabani+herkesin+i%26%23231%3Bini+rahatlatacak+%26%23351%3Bu+c%26%23252%3Bmleleri+s%26%23246%3Byl%26%23252%3Byordu%3A%3CBR%3E%3C%2FBR%3E%26%238220%3BKuzey+Irak%26%238217%3B%26%23305%3Bn+petrol+zenginli%26%23287%3Bi+Irak+halk%26%23305%3Bn%26%23305%3Bnd%26%23305%3Br.+Bug%26%23252%3Bne+kadar+Kuzey+Irak+i%26%23231%3Bin+ayr%26%23305%3Bl%26%23305%3Bk%26%23231%3B%26%23305%3B+oldu%26%23287%3Bu+yolunda+yap%26%23305%3Blan+dedikodular+bug%26%23252%3Bn+k%26%23252%3Bl+olup+u%26%23231%3Bmu%26%23351%3Btur.%26%238221%3B%3C%2FP%3E%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FDIV%3E] from [http://www.milliyet.com.tr/Yazar.aspx?aType=YazarDetay&KategoriID=3&ArticleID=1101794&AuthorID=103&a=Serpil Yilmaz&b=Kurt%20petrolu%20sahneye%20cikti&ver=90]: transformed into a download-only GET request.

sync.xmarks.com : potentially vulnerable to CVE-2009-3555

login.xmarks.com : potentially vulnerable to CVE-2009-3555

sync.xmarks.com : potentially vulnerable to CVE-2009-3555

sync.xmarks.com : potentially vulnerable to CVE-2009-3555

[Giorgio Maone]

Mmm, are you sure it's been a NoScript change?
Did evernote get any update recently?

Anwyay you should be abel to work-around by adding the following line to your NoScropt Options|Advanced|XSS exceptions box:

Code: Select all

^http://www\.evernote\.com/clip\.action$

[7.coolblue]

It works so far. Thanks