DKB banking problem

[äxl]

Hi there,

https://banking.dkb.de/dkb/-
I can log in just fine but when I click anything I'm logged out. It works when I disable NS completely.
There are 18 scripts from dkb.de and one from verisign.com (no cascading . The Personal Mailbox is only showing a "wait.gif".
If NS is enabled it additionally shows this XML request:
https://banking.dkb.de/dkb/parts/common ... ookie=true

I tried to block that with Adblock but it wouldn't help. Cookie Monster is set to accept anything from dkb.de.
It's the same site I'm send to on every link when no scripts are allowed.
When I temporarily allow all it shows the link in the address bar (like when NS is disabled) but just sends me to the login page.

Funny thing is when I re-enable NS and restart FX I'm still logged in and most functions (like mailbox) work even without scripts ...

Would be glad if someone could help
Anyways I appreciate NS very much

[therube]

If you disable all other extensions except for NoScript, do you stay logged in?


> There are 18 scripts from dkb.de and one from verisign.com

What do you mean by that?
I see ONLY dkb.de & verisign.com.

[äxl]

If you disable all other extensions except for NoScript, do you stay logged in?

Nope. Same problem.

What do you mean by that?
I see ONLY dkb.de & verisign.com.

I take these numbers from Adblock ... The scripts are like:
https://banking.dkb.de/dkb/scripts/abaxx/abaxx.js?v=75
https://banking.dkb.de/dkb/-?$part=DkbT ... e=x&time=y
...

Btw the address bar shows something like https://banking.dkb.de/dkb/-;dkbsessid=... with hash after login.

[äxl]

https://banking.dkb.de/dkb/-?$part=DkbT ... e=x&time=y

[äxl]

If I preview and then submit in this forum it cuts the links ...
So here's the XML request from the first post:
https://banking.dkb.de/dkb/parts/common ... ookie=true

[Giorgio Maone]

Does setting the noscript.surrogate.enabled about:config preference to false help?

[Thrawn]

@axl: Your links are being truncated. Please wrap them in url tags.

Have you added any ABE rules other than the default system rule?

[äxl]

Does setting the noscript.surrogate.enabled about:config preference to false help?

Works at work with setting set to true.

@axl: Your links are being truncated. Please wrap them in url tags.

Thanks. Will do in future.

Have you added any ABE rules other than the default system rule?

Not that I can remember but since it works here it should be my settings.

Will reset at home and try again later today.

[Giorgio Maone]

Will reset at home and try again later today.

Please use NoScript Options|Export first, so we can figure out what it was. Thanks.

[äxl]

Mea culpa. It was Advanced|HTTPS|Cookies|Enable ...|Force ...|"*"
"secureCookiesForced":"*",
The asterisk because I thought otherwise it wouldn't secure anything ...

So it works now with:
"secureCookies":true,
"secureCookiesForced":"",
"secureCookiesExceptions":"",
"secureCookies.perTab":false,
"secureCookies.recycle":false,