NoScript XSS attack aliexpress.com

[Hobbix]

Site: aliexpress.com
When choosing any product, I get an XSS attack.

Screenshot

[barbaz]

It's facebook tracking tripping the XSS filter. What's your question?

[Hobbix]

How can I disable this warning on this site?

[barbaz]

Does it go away if you block scripts for all facebook related domains?

[Hobbix]

Does it go away if you block scripts for all facebook related domains?

Yes. When I blocked the facebook.net domain in Noscript, the XSS attack message does not appear.

[Thrawn]

That's probably your best choice, then. Just mark facebook.net as Untrusted.

If you find that you really need to allow facebook.net sometimes, then we can help you write an ABE rule for that.

[Hobbix]

then we can help you write an ABE rule for that.

Please help me write a rule for ABE.

[Thrawn]

Probably something like this:

Code: Select all

Site .facebook.net
Anon from .aliexpress.com
Deny INC

Then whitelist facebook.net

Which site is giving you trouble when Facebook is blocked?