[UNRELATED] ClearClick warning in Gmail "Add an Attachement"

[bordway]

Hi,

NoScript version 2.2 and Mozilla FireFox 3.6.24.
Also AdBlock Plus is installed.

I recently started getting ClearClick warnings when adding attachments to my GMail messages.
I wonder if anybody knows what might have caused this?
I've been using NoScript for years without seeing this before.

The message is:
Potential Clickjacking / UI Redressing Attempt!
NoScript intercepted a mouse or keyboard interaction with a partially hidden element. Click on the image below to cycle between the obstructed and the clear version.

https://mail.google.com...ew=bsp&ver=ohhl4rw8mbn4

Thanks,

BOrdway

[Tom T.]

The next time it happens, please click "Report" in the NoScript warning box. This will generate a report that is sent to Giorgio Maone for analysis. You can also refer to that report # in your post.

By the way, the URL was truncated to the point that it didn't work at all. If you'd like to try posting it again, paste it in the "Compose" box, then wrap it in "code" tags. Select (highlight) the entire URL, then click "Code" in the toolbar at the top of the box. This will ensure that the entire URL gets posted, but also prevents anyone from accidentally clicking it (doesn't work). Thanks.

Example:

Code: Select all

https://encrypted.google.com/search?sclient=psy-ab&hl=en&site=&source=hp&q=the+hundred+years%27+war&btnG=Search

[bordway]

Hi,

I can reproduce the ClearClick message at will.

So, I clicked on report, I did not see any options to add notes.

And here is the link in code tags...

Code: Select all

https://mail.google.com/mail/?ui=2&view=bsp&ver=ohhl4rw8mbn4

Thanks,

BOrdway

[Giorgio Maone]

So, I clicked on report, I did not see any options to add notes.

Could you tell me the report ID you get assigned?

[Tom T.]

So, I clicked on report, I did not see any options to add notes.

The next time it happens, please click "Report" in the NoScript warning box. This will generate a report that is sent to Giorgio Maone for analysis. You can also refer to that report # in your post.

No need for notes, because the report contains the info needed. As noted, it gives you a report ID #, which is what Giorgio is asking for.

Sorry if I failed to make that clear before.

[bordway]

Hi,

>Could you tell me the report ID you get assigned?
Last one is 61196
Sorry I was missing it at first so you probably got a couple.
For some reason I expected a popup.

Thanks,

BOrdway

[Giorgio Maone]

Last one is 61196

Thank you.
The culprit is the "Block" tab overlayed by Adblock Plus on the attachment link (because it's a Flash applet, really), which partially obstructs the frame and makes ClearClick cry.
I had coded a work around some time ago (by automatically hiding the tab during ClearClick checks and restoring them immediately after), hence I suspect a recent Adblock Plus update may have broken it.

[GµårÐïåñ]

Yes Giorgio you fixed this a while back when I reported that it causes the clickjacking/clearclick alerts but have not encountered it again. So it might be a change in something ABP did or it could be the other issue I posted later which is that I feel the range for the check is too wide, sometimes causing issues. I don't have that post handy to point you to it, but if you check I am sure you will see my report on it. Could checking into that yield a reason why its happening? Because I think your fix for that worked and still works as i have not encountered it again since you fixed it.

[bordway]

>>>ADP related
Thanks for the feedback.
I suspected it was an erroneous warning but... it never hurts to ask the experts.

[GµårÐïåñ]

>>>ADP related
Thanks for the feedback.
I suspected it was an erroneous warning but... it never hurts to ask the experts.

Thank you for letting us know.