help making XSS exception

[Gazer75]

I have no idea how to do regex so need help making the following website work. Assuming the issue is XSS. Its working fine only when I allow scripts globally.
Really love NoScript, but its making way to many government sites not work properly. Guess its because of the way they connect to each other with scripts.

Link

The numbers behind appid= and webmap= will obviously change.

Thank you

[therube]

Looks to work for me by allowing:

Code: Select all

+eu-west-1.elb.amazonaws.com
+arcgisonline.com
+arcgis.com

[Gazer75]

Only a blank page for me...

[Gazer75]

AdBlock sees the following with NoScript enabled

Code: Select all

http://serverapi.arcgisonline.com/jsapi/arcgis/3.5/js/dojo/dijit/themes/tundra/tundra.css
http://serverapi.arcgisonline.com/jsapi/arcgis/3.5/js/esri/css/esri.css
http://serverapi.arcgisonline.com/jsapi/arcgis/3.5compact
http://vegvesenet.maps.arcgis.com/apps/SimpleMapViewer/javascript/desktopUtils.js
http://vegvesenet.maps.arcgis.com/apps/SimpleMapViewer/javascript/geolocateUtils.js
http://vegvesenet.maps.arcgis.com/apps/SimpleMapViewer/javascript/layout.js

[Gazer75]

Anyone else have any ideas?

[Giorgio Maone]

I can't see any XSS issue.
Anyway, I got a blank page too (and also a strange error message window about security permission) until I allowed all the following:

1. arcgis.com
2. geodataonline.no
3. arcgisonline.com

Then the map worked just fine.
Did you try with all these permissions?

[Gazer75]

Thanks for looking at this.

I have all three are in my whitelist and still nothing but a blank page

[Giorgio Maone]

Thanks for looking at this.

I have all three are in my whitelist and still nothing but a blank page

Could you try on a clean profile with just NoScript installed?