Does Disable XSS Require Browser Restart?

Ask for help about NoScript, no registration needed to post
User avatar
therube
Ambassador
Posts: 7991
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Does Disable XSS Require Browser Restart?

Post by therube »

Does Disable XSS Require Browser Restart?

Because even after unchecking both XSS items, I am still getting XSS warnings in Error Console.

Tried new tab & new window.
Neither made a difference?


PS: Why is there no notification on XSS blocks?

Code: Select all

[NoScript] Blocking cross-site Javascript served from https://www.tradepub.com/c/tppre.mpl?first=the&last=rube&title=&company=&email=abc@def.com&phone=3019012340&street=123+main+st&dept_div=&city=WASHINGTON&state=DC&zip=20001&indcode1=15&indcode2=11&ocpcode1=19&ocpcode2=10&ocpcode3=2&orgemp=D005&_=6713567693536 with wrong type info image/gif and included by https://tradepub.freebizmag.com/20000931/checkout.html
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 5.1; rv:25.0) Gecko/20100101 SeaMonkey/2.22a2
User avatar
Thrawn
Master Bug Buster
Posts: 3106
Joined: Mon Jan 16, 2012 3:46 am
Location: Australia
Contact:

Re: Does Disable XSS Require Browser Restart?

Post by Thrawn »

That isn't the (regular) XSS filter, it's the cross-site inclusion filter. It's telling you that although a resource was imported using (presumably) a script tag, the server thinks it's sending you an image. Actually, it looks like a web bug. You might want to block it with ABE.
======
Thrawn
------------
Religion is not the opium of the masses. Daily life is the opium of the masses.

True religion, which dares to acknowledge death and challenge the way we live, is an attempt to wake up.
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:23.0) Gecko/20100101 Firefox/23.0
Post Reply