[Resolved] Wall Street Journal

[plkwas]

Can someone please tell me what I need to do to stop this error message and to stop no script from doing whatever it is doing in this case.

NoScript filtered a potential cross-site scripting (XSS) attempt from [http://online.wsj.com]. Technical details have been logged to the Console.

I have tried every suggestion of yours that I understand and nothing works.

Thank you for your help.

Phil King

[therube]

Can you post the related Error Console message.

[plkwas]

'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137
usingOldMemoryReporter err=TypeError: Cc['@mozlla.org/memory-reporter-manager;1'] is undefined
'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137
'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137
'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137
DJ JSFirstExec: itp:2543
"[ begin jsfirstexec ]" itp:2543
"[ end jsfirstexec ]" itp:2552
Synchronous XMLHttpRequest on the main thread is deprecated because of its detrimental effects to the end user's experience. For more help http://xhr.spec.whatwg.org/ j_global_slim-static.js:36
usingOldMemoryReporter err=TypeError: Cc['@mozlla.org/memory-reporter-manager;1'] is undefined
'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137
Use of getUserData() or setUserData() is deprecated. Use WeakMap or element.dataset instead. cacheobj.js:829
Using //@ to indicate sourceURL pragmas is deprecated. Use //# instead j_global_slim-static.js:4
DJ JSExec: itp:2562
"[ begin jsexec ]" itp:2562
"[ end jsexec ]" itp:2632
"require script has executed" script.js:2
"oCnt is null" 20140403184327.js:3104
mutating the [[Prototype]] of an object will cause your code to run very slowly; instead create the object with the correct initial [[Prototype]] value using Object.create main.js:380
mutating the [[Prototype]] of an object will cause your code to run very slowly; instead create the object with the correct initial [[Prototype]] value using Object.create script-compiler.js:100
"pageLoaded host:online.wsj.com nodeName:#document" heartbleed.js:108
"site result:1" heartbleed.js:185
Use of Mutation Events is deprecated. Use MutationObserver instead. script-compiler.js:140
'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137
'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137
TypeError: content_document.location is undefined rdb.firefox.overlay.js:76
syntax error infinite_scrolling_rules.json:1
"Porthole: Using built-in browser support" lifp_prod.js:338
TypeError: content_document.location is undefined rdb.firefox.overlay.js:76
'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137
'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137
Use of getPreventDefault() is deprecated. Use defaultPrevented instead. jquery.js:3527
'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137
'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137
[NoScript InjectionChecker] JavaScript Injection in coalesced:///site/4454ret=html&limit=10&r=3003&phint=serverDomain=online.wsj.com, primaryProduct=Online Journal, pageName=WSJ_ITP_pageone, section=WSJ_ITP, articleType=WSJ_Summaries_WSJ_ITP_pageone, subSection=WSJ_ITP_ITP US, contentType=summaries, encryptedUUID=V1-cHBsbGtr, contentChannel=Summaries, isSub=WSJ_reg_yes, edition=Edition_North_America_USA, subsection=WSJ_ITP, __bk_k=In Today's Paper - Wsj.com
(function anonymous() {
serverDomain=online.wsj.com, primaryProduct=Online /* COMMENT_TERMINATOR */
DUMMY_EXPR
})
[NoScript XSS] Sanitized suspicious request. Original URL [http://tags.bluekai.com/site/4454?ret=h ... %20Wsj.com] requested from [http://online.wsj.com/itp?_nocache=1306 ... mg=com-wsj]. Sanitized URL: [http://tags.bluekai.com/site/4454?ret=h ... 8921334973].
TypeError: content_document.location is undefined rdb.firefox.overlay.js:76
mutating the [[Prototype]] of an object will cause your code to run very slowly; instead create the object with the correct initial [[Prototype]] value using Object.create script-compiler.js:100
Use of Mutation Events is deprecated. Use MutationObserver instead. script-compiler.js:140
'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137
usingOldMemoryReporter err=TypeError: Cc['@mozlla.org/memory-reporter-manager;1'] is undefined
'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137

[barbaz]

Bluekai is a tracker. I don't know if anything actually malicious is happening here, but I would suggest you leave that XSS warning alone and thank NoScript for potentially saving you.
If you don't want to see any user-facing warning, it would be best to outright block that request: try adding to NoScript Options -> Advanced -> ABE -> USER

Code: Select all

Site .bluekai.com
Deny

Does that help, or does it result in you getting a different user-facing warning?

[plkwas]

I blocked blukai, and the rest of the trackers, on the drop-down menu and that seems to solve the problem.

Thank you very much.

Phil