[Solved: inclusion type checking] Help with XSS exception

[bege]

I read about regex and related posts here, nevertheless I cannot find the correct exception for this blocking:

[NoScript] Blocking cross-site Javascript served from https://www.img-bahn.de/appcontent/json ... de_DEU.txt with wrong type info text/plain and included by https://reiseauskunft.bahn.de/bin/query ... 1&OK#focus

The exception should include second level domains as https://fahrkarten.bahn.de (https://*.bahn.de/*)

NoScript does not show a message for this blocking although the respective box is checked. Is that correct?

This blocking also happens with XSS deactivated. Why?

I use NoScript 2.9.0.14 in Firefox 49.0.2 on Windows 7 Professional 64 bit SP1

[barbaz]

That's not the XSS filter, that's inclusion type checking.

about:config > noscript.inclusionTypeChecking.exceptions
add on the end, separate by a single whitespace

Code: Select all

.img-bahn.de/appcontent/jsonp/*.txt

[bege]

Thank you very much

[barbaz]

You're welcome!