Allowing Google Plus notifications

Ask for help about NoScript, no registration needed to post
IamaGuest

Allowing Google Plus notifications

Post by IamaGuest »

I get a XSS/clickjacking warning when I try to view notifications for Google Plus in Gmail. I don't want to disable the XSS protection entirely, but I want the notifications to stop in this particular instance.

Google.com is already whitelisted and the following is already in my XSS whitelist:

Code: Select all

^https?://([a-z]+)\.google\.(?:[a-z]{1,3}\.)?[a-z]+/(?:search|custom|\1)\?
I'm not totally up on my regular expressions but should that not also allow plus.google.com?

Any help would be appreciated.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.22) Gecko/20110902 Firefox/3.6.22 ( .NET CLR 3.5.30729)
Tom T.
Field Marshal
Posts: 3620
Joined: Fri Mar 20, 2009 6:58 am

Re: Allowing Google Plus notifications

Post by Tom T. »

Sorry that this fell through the cracks for almost a month. I'll flag this for Giorgio's personal attention.

Thank you for your patience.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.23) Gecko/20110920 Firefox/3.6.23
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: Allowing Google Plus notifications

Post by Giorgio Maone »

Could you please show me at least one instance of [NoScript XSS] line appearing in your Tools>Error Console when this happens?
Mozilla/5.0 (Windows NT 5.2; WOW64; rv:7.0.1) Gecko/20100101 Firefox/7.0.1
Post Reply