Problem logging into a site

[johnpd]

It appears that ever since I upgraded to NoScript 2.1.1, I am unable to login into the Verizon Community Forum. I receive these messages:

[NoScript XSS] Sanitized suspicious upload to [https://signin.verizon.com/sso/authsso/forumLogin.jsp <with more data following>
[NoScript XSS] Sanitized suspicious request referer. URL [https://signin.verizon.com/sso/authsso/forumLogin.jsp (REF: http://www22.verizon.com/content/sso/signin.aspx <with more data following>
signin.verizon.com : server does not support RFC 5746, see CVE-2009-3555


I noticed someone with a similar login problem on a Wells Fargo site. The latest development build refers to a fix for that site. Is there a more general fix?



Thanks,

JohnD

[therube]

URL: http://www22.verizon.com/content/sso/signin.aspx
(bogus data works fine)

Code: Select all

[NoScript XSS] Sanitized suspicious upload to [https://signin.verizon.com/sso/authsso/communityLogin.jsp###DATA###%2FwEPDwUKMTA4MjQzODA5Nw9kFgICAQ9kFiQCBA8WAh4EVGV4dGVkAgkPDxYCHwBlFgIeBXN0eWxlBQ1kaXNwbGF5Om5vbmU7ZAIKDw9kFgIeCm9ua2V5cHJlc3MFIWRvQ2xpY2soJ3RlbF9idG5fcmVnaXN0ZXInLGV2ZW50KWQCCw8PZBYCHwIFIWRvQ2xpY2soJ3RlbF9idG5fcmVnaXN0ZXInLGV2ZW50KWQCDA8PZBYCHwIFIWRvQ2xpY2soJ3RlbF9idG5fcmVnaXN0ZXInLGV2ZW50KWQCDQ8PZBYCHwIFIWRvQ2xpY2soJ3RlbF9idG5fcmVnaXN0ZXInLGV2ZW50KWQCDg8PZBYCHwIFIWRvQ2xpY2soJ3RlbF9idG5fcmVnaXN0ZXInLGV2ZW50KWQCDw8PZBYCHwIFIWRvQ2xpY2soJ3RlbF9idG5fcmVnaXN0ZXInLGV2ZW50KWQCEA8PZBYCHwIFIWRvQ2xpY2soJ3RlbF9idG5fcmVnaXN0ZXInLGV2ZW50KWQCEQ8PZBYCHwIFIWRvQ2xpY2soJ3RlbF9idG5fcmVnaXN0ZXInLGV2ZW50KWQCFA9kFgICAQ8PZBYCHwIFIWRvQ2xpY2soJ3RlbF9idG5fcmVnaXN0ZXInLGV2ZW50KWQCFQ8PZBYCHwIFIWRvQ2xpY2soJ3RlbF9idG5fcmVnaXN0ZXInLGV2ZW50KWQCFw8PZBYCHwIFIWRvQ2xpY2soJ3RlbF9idG5fcmVnaXN0ZXInLGV2ZW50KWQCGA8PZBYCHwIFIWRvQ2xpY2soJ3RlbF9idG5fcmVnaXN0ZXInLGV2ZW50KWQCGQ8PZBYCHwIFIWRvQ2xpY2soJ3RlbF9idG5fcmVnaXN0ZXInLGV2ZW50KWQCGg8PZBYCHgdvbmNsaWNrBSRqYXZhc2NyaXB0OnJldHVybiB0ZWx2YWxpZGF0ZWZvcm0oKTtkAhwPDxYCHwBlFgIfAQUNZGlzcGxheTpub25lO2QCJw8PZBYCHwMFIWphdmFzY3JpcHQ6cmV0dXJuIHZhbGlkYXRlZm9ybSgpO2QYAQUeX19Db250cm9sc1JlcXVpcmVQb3N0QmFja0tleV9fFgIFB2Noa0JveDMFFHRlbF9jaGtfYWNjZXB0X3Rlcm1zikzKXugzjFdrNqovBG2dFVgaEGk%3D] from [http://www22.verizon.com/content/sso/signin.aspx]: transformed into a download-only GET request.

Note that the XSS warning bar only appears for an instant, as the page refreshes.

[johnpd]

That is correct that a message momentarily appears at the top of the screen and then the page refreshes to its original state without logging me in.

JohnD

[johnpd]

The latest development build (2.1.1.2rc2) has fixed my issue. Thanks to Giorgio.