Several HP.COM web pages trigger XSS warning

[gvp]

the problem is that when we have a XSS warning the browser freezes for some seconds ... very annoying

i can't mark bluekai as untrusted ... so what is the solution ?

[barbaz]

the problem is that when we have a XSS warning the browser freezes for some seconds ... very annoying

Sorry, I misunderstood your point.
In that case XSS exception for requests to bluekai, coupled with an ABE rule to completely block all requests to bluekai as suggested above, is indeed the best solution. That's not dangerous because ABE would then block those requests so it doesn't matter what the XSS filter does or doesn't do, the end result is the same.

[gvp]

the problem is that when we have a XSS warning the browser freezes for some seconds ... very annoying

Sorry, I misunderstood your point.

the point is, whenever I have a XSS warning the firefox freezes for some seconds ... and when it unfreezes the XSS warning appears ... is this normal ?

In that case XSS exception for requests to bluekai, coupled with an ABE rule to completely block all requests to bluekai as suggested above, is indeed the best solution. That's not dangerous because ABE would then block those requests so it doesn't matter what the XSS filter does or doesn't do, the end result is the same.

this works quite well ...

[barbaz]

the point is, whenever I have a XSS warning the firefox freezes for some seconds ... and when it unfreezes the XSS warning appears ... is this normal ?

I'd say it can be, other users have reported likewise. It depends what the XSS filter has to do.

In that case XSS exception for requests to bluekai, coupled with an ABE rule to completely block all requests to bluekai as suggested above, is indeed the best solution. That's not dangerous because ABE would then block those requests so it doesn't matter what the XSS filter does or doesn't do, the end result is the same.

this works quite well ...

[Thrawn]

As mentioned earlier, it would also be theoretically possible to write a surrogate designed to remove the trigger. Probably would need more investigation, but it would be quieter.