Not able to post graphics while using No Script

[Guest]

I'm trying to post images over at Live Journal. Before I installed the updates I had no problem doing this but since then I get this notice when I post:

Error
One or more errors occurred processing your request. Please go back, correct the necessary information, and submit your data again.
* Comment not posted: POST required, or missing parameter.

I've reset the Whitelist and still have the problem. I've contacted Live Journal and they tell me that people who've been using No Script with Firefox have had this problem and I need to fix my No Script. So, now I need to know what I need to fix on No Script so that I can post images again.

Here's what I use:

No Script 1.9.1.91

Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.0.8) Gecko/2009032609 Firefox/3.0.8 (.NET CLR 3.5.30729)

Thanks for your help.

[Guest]

I should add that I can post images to Live Journal using Chrome without No Script. I prefer Firefox and would like No Script to work with it if at all possible.

Thanks!

[GµårÐïåñ]

Not sure but I am assuming your xss is being sanitized and that's why you are missing post parameters. Maybe Giorgio can help you with a an exception reg for the xss to not catch or sanitize you for this site.

[Guest]

I'm pretty computer illiterate when it comes to whatever you're talking about. But I'm good at following step by step instructions on where to insert the changes needed. So any help that can be given would be greatly appreciated

Not sure but I am assuming your xss is being sanitized and that's why you are missing post parameters. Maybe Giorgio can help you with a an exception reg for the xss to not catch or sanitize you for this site.

[GµårÐïåñ]

Let's start with verifying that's your problem first and then take it from there and hopefully Giorgio can help us out. I would normally want you to gather and provide errors generated so we can inspect them but let's try something REALLY easy and see if it works or not, that could be our answer right there.

Go to NoScript options, on the "Advanced" tab select "XSS" tab and uncheck the two boxes there "Sanitize..." and "Trun cross-site...". Now go to that site and try to post your images, does it work? If yes, then we know its XSS that is stripping it and we need to go to the next step of what and why its being stripped. If not then we know it has nothing to do with XSS and we need to look elsewhere. Let me know which.

[Guest]

It worked! I did the steps you told me to take and now I can post pictures, thank you Let me know what next things I need to change. I really appreciate your help

Let's start with verifying that's your problem first and then take it from there and hopefully Giorgio can help us out. I would normally want you to gather and provide errors generated so we can inspect them but let's try something REALLY easy and see if it works or not, that could be our answer right there.

Go to NoScript options, on the "Advanced" tab select "XSS" tab and uncheck the two boxes there "Sanitize..." and "Trun cross-site...". Now go to that site and try to post your images, does it work? If yes, then we know its XSS that is stripping it and we need to go to the next step of what and why its being stripped. If not then we know it has nothing to do with XSS and we need to look elsewhere. Let me know which.

[Giorgio Maone]

Please reset those 2 XSS checkboxes to their original checked state, and retry the upload.
When it fails, open Tools|Error Console: you should see one or more lines starting with "[NoScritp XSS]". Please post them here or PM to me, and I'll tell you which exceptions you need to add in the XSS panel.

[GµårÐïåñ]

It worked! I did the steps you told me to take and now I can post pictures, thank you Let me know what next things I need to change. I really appreciate your help

Ok, now since that worked we know its XSS and you can renable them and the next step is to provide the specific error so it can be either fixed by Giorgio in the release or he can maybe provide you with the regex that you can put in the exception to make it work. To get the specific error, go to error console and then try to do what you need and then look for the generated error. Take that, copy it and send it Giorgio via PM and he will look at it and figure out exactly what it is. Good luck.

Please reset those 2 XSS checkboxes to their original checked state, and retry the upload.
When it fails, open Tools|Error Console: you should see one or more lines starting with "[NoScritp XSS]". Please post them here or PM to me, and I'll tell you which exceptions you need to add in the XSS panel.

Giorgio, I didn't suggest that it remain off, I was simply trying to get the issue narrowed down and given the novice nature of the OP, I was trying to use the least complicated method. Now that we know its that, we'll let that get sent to you and you can take it from there. Thanks.

[Giorgio Maone]

Giorgio, I didn't suggest that it remain off

I wasn't implying you did
I usually go straight to the "check error console" point, when symptoms are quite clear (such as a XSS notification bar), but in this case your preliminary step was preferable, indeed.

[GµårÐïåñ]

Good to know. I normally would too and I was half way through writing those instructions when I realized that the person said they were pretty computer illiterate and may open it up and see a huge amount of items and not know which one to grab to send and it might end up becoming frustrating, especially if it wasn't an XSS issue to begin with. Now that we know for sure it has something to do with it, then the OP has no choice but to grab that and send it.

[Guest]

Hi,

Is this what you need?

[NoScript XSS] Sanitized suspicious upload to [http://www.livejournal.com/talkpost_do. ... %22+%2F%3E] from [http://community.livejournal.com/platfo ... 64961.html]: transformed into a download-only GET request.

Please reset those 2 XSS checkboxes to their original checked state, and retry the upload.
When it fails, open Tools|Error Console: you should see one or more lines starting with "[NoScritp XSS]". Please post them here or PM to me, and I'll tell you which exceptions you need to add in the XSS panel.

[GµårÐïåñ]

Good, give Giorgio a chance to review this and then he will be able to give you something to do.

[Giorgio Maone]

Is this what you need?

Yes, just add the following line in the NoScript Options|Advanced|XSS exceptions box:

Code: Select all

^http://www\.livejournal\.com/talkpost_do\.bml$

[GµårÐïåñ]

There you have it. Now with this, you can have XSS fully enabled and you won't have any issues. Try it and get back to us to let us know it worked.

[Guest]

It worked! Thank you very much for your help and getting back to me so quickly with what I needed to change. You rock!

Is this what you need?

Yes, just add the following line in the NoScript Options|Advanced|XSS exceptions box:

Code: Select all

^http://www\.livejournal\.com/talkpost_do\.bml$