NoScript blocking credit card verifications
NoScript blocking credit card verifications
While making a purchase at NewEgg.com, I had to change options to allow all or the page wouldn't complete.. Then, after allowing all NoScript still blocked my verification from visa since it was XSS.. How exactly do I prevent that from being blocked?, from now on, when I make an online purchase this will always happen, do to changes in online banking.. Can You not add a way that we can just allow it as a request in the options during the transmission. so it can be processed..
Mozilla/5.0 (Windows; U; Win 9x 4.90; en-US; rv:1.8.1.20) Gecko/20081217 Firefox/2.0.0.20
Re: NoScript blocking credit card verifications
(There was another similar sounding post - reminded me of "verified by Visa" - but I'll be if I can find it now ...?)
(Similar, but still not what I was looking for, Script blocking on linked site.)
Finally, XSS POST to GET transform prevents 3-D Secure payments.
(Similar, but still not what I was looking for, Script blocking on linked site.)
Finally, XSS POST to GET transform prevents 3-D Secure payments.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.21) Gecko/20090403 Firefox/2.0 SeaMonkey/1.1.16
- Giorgio Maone
- Site Admin
- Posts: 9524
- Joined: Wed Mar 18, 2009 11:22 pm
- Location: Palermo - Italy
- Contact:
Re: NoScript blocking credit card verifications
@Silvarea:
Could you show me the lines starting with "[NoScript XSS]" shown in Tools|Error Console when this happens?
Could you show me the lines starting with "[NoScript XSS]" shown in Tools|Error Console when this happens?
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.0.10) Gecko/2009042316 Firefox/3.0.10 (.NET CLR 3.5.30729)
Re: NoScript blocking credit card verifications
I've found that when a site uses "verified with Visa" you can click on the NoScript icon and allow the pop-up, and then use the "back" function to reload the page. Firefox will tell you that you have to resend the data, but that's not a problem. However, as there is no title bar, you don't know if the pop-up window is using http or https which is rather worrying, as you are asked for date-of-birth, mother's maiden name and so on, which really should only go over a secure channel.
Seems a daft idea to me to be asking for such security details over t'Internet, but that's a different issue.
Seems a daft idea to me to be asking for such security details over t'Internet, but that's a different issue.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.9.2) Gecko/20100115 Firefox/3.6