Does anyone know how to Login to eBay with NoScript? If I allow XSS I get to a redirection page however that quickly relodes and loops back to the original login page.
Any help would be greatly appreciated.
How to Login to eBay with NoScript
How to Login to eBay with NoScript
Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.154 Safari/537.36
Re: How to Login to eBay with NoScript
Can you copy the XSS message from the Browser Console (Ctrl+Shift+J) and paste it here?
If the spam filter blocks you, then please send it to a moderator via private message.
If the spam filter blocks you, then please send it to a moderator via private message.
======
Thrawn
------------
Religion is not the opium of the masses. Daily life is the opium of the masses.
True religion, which dares to acknowledge death and challenge the way we live, is an attempt to wake up.
Thrawn
------------
Religion is not the opium of the masses. Daily life is the opium of the masses.
True religion, which dares to acknowledge death and challenge the way we live, is an attempt to wake up.
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0
Re: How to Login to eBay with NoScript
I am having the same problem. Whenever I try to log in it loops back to the login page, I will try to message a mod
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:41.0) Gecko/20100101 Firefox/41.0
Re: How to Login to eBay with NoScript
Have they helped you to a solution? If so can you please post the solution here for others with this problem to reference?robdc wrote:I will try to message a mod
*Always* check the changelogs BEFORE updating that important software!
-
Re: How to Login to eBay with NoScript
I forgot all about this and just suffered with the persisting issue, but it's starting to infuriate me again. I never heard back from the mod I messaged, so I have just messaged another on.barbaz wrote:Have they helped you to a solution? If so can you please post the solution here for others with this problem to reference?robdc wrote:I will try to message a mod
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0
Re: How to Login to eBay with NoScript
No one should ever have to wait that long for a response from a Moderator ("green user") for something like this.
@robdc: see PM
@robdc: see PM
*Always* check the changelogs BEFORE updating that important software!
-
Re: How to Login to eBay with NoScript
robdc wrote: I sent this message to another mod several months ago...
The Browser Console says:
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: ds1=ats/1443815184428; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: ds2=asotr/b7qefz8wzN_z^; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: ebay=%5Ecv%3D15555%5Esin%3Din%5Ejs%3D1%5EsfLMD%3D1388925412%5Esbf%3D%231000040000004%5Ecos%3D1%5E; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: dp1=bexpt/000144381486912456ff7795^pcid/98755244257f01290^a1p/056103090^bl/GB59d14610^fm/5.3.256366c10^kms/in59d14610^pbf/%2380800000000457f01290^mpc/9%7C356366c10^tzo/-3c560eed20^exc/0%3A0%3A0%3A056366c10^u1p/cm9iLWRj57f01290^u1f/Robert57f01290^; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: ns1=BAQAAAVAl2SF5AAaAAKUADVfwEpAxMDMwNzQ4MzkxLzA7De1oFQdAaj7P5O2V5zzzlmnClvE*; domain=.ebay.co.uk; path=/; HttpOnly; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: cssg=2a12876b1500a7ec736586f2ffffa76c; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: s=BAQAAAVAl2SF5AAWAABEAC1YO48AwMDAwMHJvYi1kYwABAAZWEDCQcm9iLWRjABIAClYQMJB0ZXN0Q29va2llAAMABVYQMJAxNjM4NAD0ACJWEDCQJDIkUFJJZGliOHIkMlhaOVBoNEROTkpDd0RtdmNwLzVvMAFlAAJWEDCQIzIBRQAIV/ASkDUzODRjYmYxAAYAAVYQMJA1AKgAAVYQMJAxAPgAIFYQMJAyYTEyODc2YjE1MDBhN2VjNzM2NTg2ZjJmZmZmYTc2YwAMAApWEDCQMTAzMDc0ODM5MQA9AAZWEDCQcm9iLWRjSbTZ1wMpBftHhzXuTu9oxxNVnk4*; domain=.ebay.co.uk; path=/; HttpOnly; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: nonsession=BAQAAAVAl2SF5AAaAAEAABlfwEpByb2ItZGMAEAAGV/ASkHJvYi1kYwAzAAxX8BKQdG4yNCA4YmIsR0JSAPMAIlfwEpAkMiRQUklkaWI4ciQyWFo5UGg0RE5OSkN3RG12Y3AvNW8wAWQAA1fwEpAjOGEABAAGV/ASkHJvYi1kYwCqAAFX8BKQMwDKACBfdOCQMmEwZTlhYTgxNTAwYTM1ODI4MTQ1OWRlZmZmNTdmOGQAmgAHVhGCEHJvYi1kY2oAywABVg7mGDMAnAA4V/ASkG5ZK3NIWjJQckJtZGo2d1ZuWStzRVoyUHJBMmRqNkFFazRLbURKaUJxQTJkajZ4OW5ZK3NlUT09AJ0ACFfwEpAwMDAwMDAwMF8s5gMPhZ5vWYg9rruJXlK0Irsl; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: shs=BAQAAAVAl2SF5AAaAAVUADlfwEpA2NjM2MjM0MzEwMDEsM7mCqiJjUuiVHwGjpLfQueqgFnOe; domain=.ebay.co.uk; path=/; HttpOnly; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://reg.ebay.co.uk: ebay=%5EsfLMD%3D1388925412%5Esin%3Din%5Esbf%3D%231000040000004%5Ecos%3D1%5Ecv%3D15555%5Ejs%3D1%5E; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://reg.ebay.co.uk: ns1=BAQAAAVAl2SF5AAaAAKUADVfwEpExMDMwNzQ4MzkxLzA7YVypcjfA6VvIHp3DUmKS35Uk0rM*; domain=.ebay.co.uk; path=/; HttpOnly; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://reg.ebay.co.uk: dp1=bkms/in59d14611^u1f/Robert57f01291^tzo/-3c560eed21^exc/0%3A0%3A0%3A056366c11^fm/5.3.256366c10^pcid/98755244257f01291^mpc/9%7C3561c0e11^a1p/056103091^u1p/cm9iLWRj57f01291^bl/GB59d14611^expt/000144381486912456ff7795^pbf/%2380800000000457f01291^; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://reg.ebay.co.uk: s=BAQAAAVAl2SF5AAWAAAwAClYQMJExMDMwNzQ4MzkxAPgAIFYQMJEyYTEyODc2YjE1MDBhN2VjNzM2NTg2ZjJmZmZmYTc2YwAGAAFWEDCRNQFlAAJWEDCRIzIAEgAKVhAwkXRlc3RDb29raWUAPQAGVhAwkXJvYi1kYwFFAAhX8BKRNTM4NGNiZjEAEQALVg7jwDAwMDAwcm9iLWRjAKgAAVYQMJAxAPQAIlYQMJEkMiRQUklkaWI4ciQyWFo5UGg0RE5OSkN3RG12Y3AvNW8wAAEABlYQMJByb2ItZGMAAwAFVhAwkTE2Mzg0hyDUI5HAZNPOLgcPQVHPNXQ3q/U*; domain=.ebay.co.uk; path=/; HttpOnly; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://reg.ebay.co.uk: nonsession=BAQAAAVAl2SF5AAaAAJ0ACFfwEpEwMDAwMDAwMACqAAFX8BKRMwFkAANX8BKRIzhhADMADFfwEpF0bjI0IDhiYixHQlIAywABVg7mGTQAmgAHVhGCEHJvYi1kY2oAQAAGV/ASkXJvYi1kYwAQAAZX8BKRcm9iLWRjAMoAIF904JEyYTBlOWFhODE1MDBhMzU4MjgxNDU5ZGVmZmY1N2Y4ZADzACJX8BKRJDIkUFJJZGliOHIkMlhaOVBoNEROTkpDd0RtdmNwLzVvMAAEAAZX8BKQcm9iLWRjAJwAOFfwEpFuWStzSFoyUHJCbWRqNndWblkrc0VaMlByQTJkajZBRWs0S21ESmlCcUEyZGo2eDluWStzZVE9PXFZdVuNoLceVv7fxvEga9KcZ+QL; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: ds1=ats/0; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: ds2=asotr/b7qefz8wzN_z^; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: ebay=%5Ecv%3D15555%5Esbf%3D%23%5E; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: dp1=bexpt/000144381518606856ff78d2^pbf/%232000000000000000080000000000457f01292^u1p/QEBfX0BAX19AQA**57f01292^bl/GB59d14612^; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: ns1=BAQAAAVAl2SF5AAaAAKUADVfwEpIxMDMwNzQ4MzkxLzA7WNxj4Uf+Wq8QtyY+nOtms5h8YEk*; domain=.ebay.co.uk; path=/; HttpOnly; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: cssg=2a175dab1500a7e04b1197b7fffeb4fe; domain=.ebay.co.uk; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: s=BAQAAAVAl2SF5AAWAAPgAIFYQMJIyYTE3NWRhYjE1MDBhN2UwNGIxMTk3YjdmZmZlYjRmZQASAApWEDCSdGVzdENvb2tpZQ4QCvaY05CFXvE5lE35YVDKsRxO; domain=.ebay.co.uk; path=/; HttpOnly; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.co.uk: nonsession=CgADKACBfdOCSMmEwZTlhYTgxNTAwYTM1ODI4MTQ1OWRlZmZmNTdmOGQAywABVg7mGjKjvPxL; domain=.ebay.co.uk; path=/; Secure
about:blank : Unable to run script because scripts are blocked internally. <unknown>
Blocking reflected script inclusion origin XSS from https://signin.ebay.co.uk/ws/eBayISAPI. ... FWatchList: https://www.paypalobjects.com/webstatic ... .pp.min.js
embedded by
https://c.paypal.com/v1/r/d/i?js_src=ht ... .pp.min.js
about:blank : Unable to run script because scripts are blocked internally. <unknown>
[NoScript HTTPS] AUTOMATIC SECURE on https://b.stats.paypal.com: c=cf16709463b829311f13; domain=.stats.paypal.com; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://b.stats.paypal.com: session=eyJxIjp7InIiOiJjRDB5WVRCbE9XRmhPREUxTURCaE16VTRNamd4TkRVNVpHVm1abVkxTjJZNFpDWnBQVGd4TGpFM01TNDVOeTR4TURFbWREMHhORFF6T0RFMU1UZzJKbUU5TWpCeUpFdmRzWFVtR1pxd3BFMXRKZmJuXzRXa1VBPT0ifSwidiI6MX0.CPBwkw.P5LwDHoj2k_a3KuA4TPP6_DYdMc; domain=.stats.paypal.com; path=/; HttpOnly; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.com: ebay=%5Ecv%3D15555%5Esbf%3D%23%5E; domain=.ebay.com; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.com: dp1=bu1p/QEBfX0BAX19AQA**57f01294^bl/GB59d14614^; domain=.ebay.com; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.com: s=CgAD4ACBWEDCUMmExMjQ1MjExNTAwYTYyMzA0NTRkY2U0ZmZjNjY1ZGSMY4nW; domain=.ebay.com; path=/; HttpOnly; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://signin.ebay.com: nonsession=CgADKACBfdOCUMmExMjQ1MjExNTAwYTYyMzA0NTRkY2U0ZmZjNjY1ZGUAywABVg7mHDQKC+Oh; domain=.ebay.com; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://slc.stats.paypal.com: c=cf16709463b829311f13; domain=.stats.paypal.com; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://slc.stats.paypal.com: session=; domain=.stats.paypal.com; path=/; Secure
Last edited by barbaz on Fri Jun 24, 2016 9:19 pm, edited 2 times in total.
Reason: kill board-generated links try 2 (oops)
Reason: kill board-generated links try 2 (oops)
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 5.1; rv:43.0) Gecko/20100101 SeaMonkey/2.40
Re: How to Login to eBay with NoScript
If it's really XSS issue, and not automatic secure cookie management, this is the relevant console message. Unfortunately it got too cut off for us to assess the situation properly.therube wrote:Blocking reflected script inclusion origin XSS from https://signin.ebay.co.uk/ws/eBayISAPI. ... FWatchList: https://www.paypalobjects.com/webstatic ... .pp.min.js
embedded by
https://c.paypal.com/v1/r/d/i?js_src=ht ... .pp.min.js
To confirm whether this is really the problem, as a test - and this is only a test, *not* a potential solution - try setting about:config > noscript.xss.checkInclusions to false
*Always* check the changelogs BEFORE updating that important software!
-