[MOOT] XSUH & noscript

General discussion about the NoScript extension for Firefox
Post Reply
seleko
Posts: 9
Joined: Mon Jun 22, 2009 4:32 am

[MOOT] XSUH & noscript

Post by seleko »

Hello!
Just want to know why nosc doesn't help in this case?
https://bugzilla.mozilla.org/show_bug.cgi?id=568564
Mozilla/5.0 (X11; U; Linux x86_64; de; rv:1.9.3) Gecko/20100401 SUSE/3.6.4-1.1 Firefox/3.6.4
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: XSUH & noscript

Post by Giorgio Maone »

It does help, actually.
The "attack" doesn't work, unless you had previously whitelisted the attacker's page.
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3
User avatar
therube
Ambassador
Posts: 7969
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: XSUH & noscript

Post by therube »

alert('Please use Mozilla Firefox');
Dumb exploits won't work in SeaMonkey. Needs to learn how to properly sniff a browser ;-).

Gecko is Gecko
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.9) Gecko/20100317 SeaMonkey/2.0.4
seleko
Posts: 9
Joined: Mon Jun 22, 2009 4:32 am

Re: XSUH & noscript

Post by seleko »

hm... looks my fault. sorry.
Mozilla/5.0 (X11; U; Linux x86_64; de; rv:1.9.3) Gecko/20100401 SUSE/3.6.4-1.1 Firefox/3.6.4
Post Reply