I get a XSS/clickjacking warning when I try to view notifications for Google Plus in Gmail. I don't want to disable the XSS protection entirely, but I want the notifications to stop in this particular instance.
Google.com is already whitelisted and the following is already in my XSS whitelist:
Code: Select all
^https?://([a-z]+)\.google\.(?:[a-z]{1,3}\.)?[a-z]+/(?:search|custom|\1)\?
I'm not totally up on my regular expressions but should that not also allow plus.google.com?
Any help would be appreciated.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.22) Gecko/20110902 Firefox/3.6.22 ( .NET CLR 3.5.30729)