XSS protection breaks wifi login page for Amtrack

Bug reports and enhancement requests
Post Reply
WhyNotUseABugTracker
Posts: 2
Joined: Fri Nov 25, 2016 11:35 pm

XSS protection breaks wifi login page for Amtrack

Post by WhyNotUseABugTracker »

The title pretty much says it. I'm using NoScript 2.9.5.1 with Firefox 50.0 on Linux Mint 17.2 (Quiana). Loading any http page (because Firefox is dumb and can't redirect properly on https pages) would result in the standard XSS warning appearing at the top of the browser and the page would fail to load. I didn't see an option for temporarily disabling the XSS protection, so I disabled NoScript and was able to login as usual. After logging into the WiFi, I could browse as usual with NoScript re-enabled.

I expect this is a problem with other login-required WiFi pages, but for obvious reasons I can't test those.

This is my first post on here, so apologies if I missed any rules. I thought posting this might help other people with the same issue. Let me know if I can provide any other information.
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:50.0) Gecko/20100101 Firefox/50.0
barbaz
Senior Member
Posts: 11109
Joined: Sat Aug 03, 2013 5:45 pm

Re: XSS protection breaks wifi login page for Amtrack

Post by barbaz »

Did you try NoScript latest development build?
*Always* check the changelogs BEFORE updating that important software!
-
WhyNotUseABugTracker
Posts: 2
Joined: Fri Nov 25, 2016 11:35 pm

Re: XSS protection breaks wifi login page for Amtrack

Post by WhyNotUseABugTracker »

barbaz wrote:Did you try NoScript latest development build?
No. I'd like to, but I can't seem to reproduce the problem any more since the WiFi doesn't ask me to re-login, even after changing operating systems and my MAC address. If you can think of a way to force the WiFi to re-authenticate me, I'd be happy to help, but I've reached the limit of my knowledge.

Sorry, perhaps someone else can say whether the problem has been resolved. I do see an XSS over-sensitivity fix in the changelog, so I wouldn't be surprised.
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:50.0) Gecko/20100101 Firefox/50.0
barbaz
Senior Member
Posts: 11109
Joined: Sat Aug 03, 2013 5:45 pm

Re: XSS protection breaks wifi login page for Amtrack

Post by barbaz »

If you can't manually log out of the Wi-Fi, I wouldn't know anything else to try there either.

I suggest you install the dev build anyway, so that you'll have it - then whenever it is that you next login to this Wi-Fi, please let us know how it works out. Thanks.
*Always* check the changelogs BEFORE updating that important software!
-
Post Reply