XSS @ CNN liveTV

General discussion about the NoScript extension for Firefox
Post Reply
satyrias
Posts: 19
Joined: Tue Mar 06, 2012 3:00 pm

XSS @ CNN liveTV

Post by satyrias »

I have been trying to get the CNN liveTV after enabling NoScript.

I used to watch the CNN live TV, after entering the password of my local cable service, which is Comcast. I think the problem is this Cross site restriction. But, I don't know how to write the regular expression to enter in the exception.

Would someone help me with it?

Thanks
Mozilla/5.0 (Windows NT 6.0; rv:10.0.2) Gecko/20100101 Firefox/10.0.2
User avatar
therube
Ambassador
Posts: 7969
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: XSS @ CNN liveTV

Post by therube »

Does the Error Console show anything relevant?
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 5.1; rv:12.0a2) Gecko/20120305 Firefox/12.0a2 SeaMonkey/2.9a2
satyrias
Posts: 19
Joined: Tue Mar 06, 2012 3:00 pm

Re: XSS @ CNN liveTV

Post by satyrias »

Yes, it showed XSS with a mark. Right now I can't reproduce it to say exactly what was it after I made several changes..

This is the site I am talking about:
http://www.cnn.com/video/?_=105143#/vid ... cvpstream1
Mozilla/5.0 (Windows NT 6.0; rv:10.0.2) Gecko/20100101 Firefox/10.0.2
User avatar
GµårÐïåñ
Lieutenant Colonel
Posts: 3369
Joined: Fri Mar 20, 2009 5:19 am
Location: PST - USA
Contact:

Re: XSS @ CNN liveTV

Post by GµårÐïåñ »

Unless you want to exempt the whole site, which is a bad idea, then you need give us the actual XSS notice it gives so we can give you something specific and useful. Next time you get the XSS message, go to Error Console, copy it and paste it here. Your link produces no error for us, so it must be something on your end or a false hit unless you can provide the needed debug info to see what gives.
~.:[ Lï£ê ï§ å Lêmðñ åñÐ Ì Wåñ† M¥ Mðñê¥ ßå¢k ]:.~
________________ .: [ Major Mike's ] :. ________________
Mozilla/5.0 (Windows NT 6.1; rv:10.0.2) Gecko/20100101 Firefox/10.0.2
Post Reply