XSS help needed

Ask for help about NoScript, no registration needed to post
expeditionist

XSS help needed

Post by expeditionist »

I'd like to trust XSS requests from https://keepa.com to https://www.amazon.co.uk/ but I can't work out what regular expressions to put in the XSS filter box. I tried ^@https?://([^/]+\.)?keepa\.com/ and ^https://([^/]+\.)?amazon\.co.uk/ but it doesn't work.

Be glad of help please?

Also, an easier way to whitelist XSS for certain domains might benefit non-tech users maybe?

Thanks.
Mozilla/5.0 (Windows NT 6.3; WOW64; rv:47.0) Gecko/20100101 Firefox/47.0
barbaz
Senior Member
Posts: 11141
Joined: Sat Aug 03, 2013 5:45 pm

Re: XSS help needed

Post by barbaz »

Image Either of those entries would accomplish exactly what you're asking about...

Can you please check the Browser Console (Ctrl-Shift-J) when this XSS issue happens and post here any messages related to NoScript?
(related messages usually start with either "[NoScript" or "[ABE]"; if you don't know what's related, turn off CSS warnings and post everything else you see)
*Always* check the changelogs BEFORE updating that important software!
-
Post Reply