Cannot Copy out of Console2 when open from XSS Notification

[therube]

Cannot Copy (text) out of Console² (like Error Console) when opened from NoScript XSS notification, Show Console...

http://forums.mozillazine.org/viewtopic ... #p12480797

install NoScript
install Console2
open a page that generates an XSS warning
use NoScript XSS notification to 'Show Console...'

Error Console (Console2) opens

attempt to copy text out from Console2

text is not copied

SeaMonkey is affected.
FF looks not to be.

[Giorgio Maone]

Are you able to copy any other Console2 message on Seamonkey?
If not, does disabling NoScript help?

[therube]

> Are you able to copy any other Console2 message on Seamonkey?

Not if I open Console2 from an (NoScript) XSS warning dialog.
Otherwise, if I manually open Console2, either by shortcut or menu, then yes.

> If not, does disabling NoScript help?

Well yes, but then I have no way to generate an XSS warning dialog .


Phil posted a suggested fix.

[Giorgio Maone]

Phil's fix will be included in next dev build, thanks.

[therube]

Resolved, thank you .

Code: Select all

http://www.yoursite.com/index.html?name=<script>alert('You just found a XSS vulnerability')</script>