[RESOLVED] XSS problem. FAQ suggestion doesn't help

General discussion about the NoScript extension for Firefox
Post Reply
glentek
Posts: 5
Joined: Thu Nov 08, 2012 7:11 pm

[RESOLVED] XSS problem. FAQ suggestion doesn't help

Post by glentek »

I am trying to execute an ebay saved search. The search is "gizmo (s1,s2) (s3,s4,s5,s6)". Noscript is identifying this a as a potential XSS problem, "sanitizing" the search criteria by removing the parentheses, and that causes the search to return undesired results. Note that the search criteria is only to illustrate the problem, and is not something that I am actually interested in.

I tried entering the suggested FAQ fix which was to add an entry in the Anti-XSS Protection Exceptions, but it does not fix the problem. Any helpful suggestions are welcome.

I tried posting the Error Console output here but could not. There was a message saying a spam filter did not like it.
Mozilla/5.0 (Windows NT 5.1; rv:16.0) Gecko/20100101 Firefox/16.0
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: XSS problem. FAQ suggestion doesn't help

Post by Giorgio Maone »

(resolved after email exchange, by adding the following XSS exceptions line:

Code: Select all

^@https?://my\.ebay\.com/ws/eBayISAPI\.dll\?
)

[Edited to add the missing "?"]
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:16.0) Gecko/20100101 Firefox/16.0
glentek
Posts: 5
Joined: Thu Nov 08, 2012 7:11 pm

Re: [RESOLVED] XSS problem. FAQ suggestion doesn't help

Post by glentek »

Actually what worked for me was

^@http://my\.ebay\.com/ws/eBayISAPI\.dll\?

Note I changed https to http.

Respecfully....
Mozilla/5.0 (Windows NT 5.1; rv:16.0) Gecko/20100101 Firefox/16.0
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: [RESOLVED] XSS problem. FAQ suggestion doesn't help

Post by Giorgio Maone »

Sorry, I did it again. I forgot a "?", just edited the post above to correct it, thanks.
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:16.0) Gecko/20100101 Firefox/16.0
Post Reply