[RESOLVED] Ebay Picture Upload XXs Problems

Ask for help about NoScript, no registration needed to post
guest-mz

[RESOLVED] Ebay Picture Upload XXs Problems

Post by guest-mz »

Hi there
I am not a native speaker, so forgive me if I make some mistakes.
When trying to upload pictures to an ebay seller form, Noscript warns me of a possible XXS attack from [http://csr.ebay.de]. This started after I first used the preview-your-offer function from ebay including the zoom function, which did not work. Before this everything worked fine.I found many forum entries about ebay and XXS problems, so i am very unsure if this is a false-positive from Noscript or a real danger.
I get the same promblem on a WinXP/Firefox/Noscript2.6.6.2 system and a Ubuntu/Firefox/Noscript2.6.6.2 system
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:21.0) Gecko/20100101 Firefox/21.0
access2godzilla
Senior Member
Posts: 109
Joined: Sun May 20, 2012 5:09 pm

Re: Ebay Picture Upload XXs Problems

Post by access2godzilla »

Could you search your Error console for "Noscript" and post the messages here?
Mozilla/5.0 (Windows NT 5.1; rv:21.0) Gecko/20100101 Firefox/21.0
guest-mz

Re: Ebay Picture Upload XXs Problems

Post by guest-mz »

Just tried to reproduce the problem and found out, it only occurs if ebay.com has not been whitelisted before the upload. Beeing from germany ebay.de is normally enough.
When I allow ebay.com during the upload I get the warning, if it has been whitelisted before that, everything works fine. So I guess its just a false positive, because ebay.com has been enabled before the upload.
sorry for bothering you, but thanks anyway
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:21.0) Gecko/20100101 Firefox/21.0
User avatar
Thrawn
Master Bug Buster
Posts: 3106
Joined: Mon Jan 16, 2012 3:46 am
Location: Australia
Contact:

Re: [RESOLVED] Ebay Picture Upload XXs Problems

Post by Thrawn »

Sites that have not been whitelisted are subjected to a much more aggressive XSS filter, because they're assumed to be dangerous. Basically, anything remotely resembling an attack will be blocked. Whitelisting the site means that it will be checked more carefully, and only blocked if it really looks like an attack.
Mozilla/5.0 (Windows NT 5.1; rv:21.0) Gecko/20100101 Firefox/21.0
VentiMan
Posts: 1
Joined: Fri Aug 09, 2013 4:18 am

Re: [RESOLVED] Ebay Picture Upload XXs Problems

Post by VentiMan »

I am having the same issue. And ebay is whitelisted
Mozilla/5.0 (Windows NT 6.0; rv:22.0) Gecko/20100101 Firefox/22.0
Post Reply