Broken URLs with braces (spaces instead of braces)

[sustmi]

Hello.

With enabled NoScript I have problems with some special URLs.

For example:

Code: Select all

http://localhost/application/search/newdomain.com(olddomain.com)

The actual sent request URI is:

Code: Select all

/application/search/newdomain.com%20olddomain.com%20

It looks like NoScript translates braces to spaces in some URLs.

However URL like this (note the space between "old" and "domain"):

Code: Select all

http://localhost/application/search/newdomain.com(old domain.com)

is sent well as:

Code: Select all

/application/search/newdomain.com(old%20domain.com)

I use current stable version and also tried development version (2.1.1).
I have default settings only with enabled setting "Completely allow all JavaScript (dangerous)", the last option in tab "General" (not sure about the actual English name, because I use Czech translation).

Note: With disabled NoScript or disabled option "Completely allow all JavaScript (dangerous)" URLs works well.

[Giorgio Maone]

It's the XSS filter.
You can work around by adding the following line to your NoScript Options|Advanced|XSS exceptions box:

Code: Select all

^http://localhost/