Redirect in <noscript> tag to mgchashgate

Ask for help about NoScript, no registration needed to post
Martin E
Posts: 1
Joined: Sat May 24, 2014 9:02 am

Redirect in <noscript> tag to mgchashgate

Post by Martin E »

Hi there,

First of all, thanks for the great tool. It saves me a lot of worries.

Recently I stumbled upon a redirect where ther was none before. Upon researching it I found out it is a redirect inside the noscript tag.

This is the code (On the site I found it, it is located even above <!DOCTYPE..):

Code: Select all

<script language='javascript' src='//mgwlock.com/cpalocker/?a=get&cid=5692'></script><noscript>Enable Javascript to access this page. Powered by the <a href="http://mgcashgate.com">MGCash</a><meta http-equiv="refresh" content="0;url=http://mgcashgate.com/nojsnotice.html"/></noscript><script>if(typeof _mgAdNotBlocked=="undefined"){document.location="http://mgcashgate.com/adblocknotice.php?from="+escape(document.location)}</script>
Is there any way of blocking that?

Thanks in advance

Martin E
Mozilla/5.0 (X11; Linux i686; rv:10.0.11) Gecko/20100101 Firefox/10.0.11 Iceweasel/10.0.11
barbaz
Senior Member
Posts: 11163
Joined: Sat Aug 03, 2013 5:45 pm

Re: Redirect in <noscript> tag to mgchashgate

Post by barbaz »

about:config -> set accessibility.blockautorefresh to true
*Always* check the changelogs BEFORE updating that important software!
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:29.0) Gecko/20100101 Firefox/29.0 SeaMonkey/2.26
User avatar
therube
Ambassador
Posts: 7991
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: Redirect in <noscript> tag to mgchashgate

Post by therube »

Shouldn't (or rather why doesn't) NoScript's | Advanced | Untrusted -> Forbid META redirections... block it?

Code: Select all

<noscript>
Enable Javascript to access this page. Powered by the <a href="http://mgcashgate.com">MGCash</a>
        <meta http-equiv="refresh" content="0;url=http://www.google.com"/>
</noscript>

Code: Select all

<html>
<head>
</head>
<body>
<noscript><meta http-equiv="refresh" content="0;url=http://www.google.com/"></noscript>
</body>
</html>
(replaced the head, body, which was in my sample but removed when first posting here)
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 5.1; rv:29.0) Gecko/20100101 SeaMonkey/2.26
User avatar
therube
Ambassador
Posts: 7991
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: Redirect in <noscript> tag to mgchashgate

Post by therube »

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 5.1; rv:29.0) Gecko/20100101 SeaMonkey/2.26
User avatar
therube
Ambassador
Posts: 7991
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: Redirect in <noscript> tag to mgchashgate

Post by therube »

And from the linked thread, this is successfully blocked:

Code: Select all

<html>
<head>
</head>
<body>
<noscript><meta http-equiv="refresh" content="0;url=://www.google.com/"></noscript>
</body>
</html>

Code: Select all

url=://www.google.com
vs

Code: Select all

url=http://www.google.com

(protocol relative urls)
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 5.1; rv:29.0) Gecko/20100101 SeaMonkey/2.26
Post Reply