Always block cross script for this site

Ask for help about NoScript, no registration needed to post
SafeTex

Always block cross script for this site

Post by SafeTex »

Hello

I'm trying out Noscript and one problem is that when I click on always block (or always allow) cross script for this site, it seems to come up again and again in the next browser session. Is this right or is it a bug?

Thanks
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0
User avatar
Thrawn
Master Bug Buster
Posts: 3106
Joined: Mon Jan 16, 2012 3:46 am
Location: Australia
Contact:

Re: Always block cross script for this site

Post by Thrawn »

If NoScript is reporting a cross-site scripting risk, then it's worth checking whether the site is, in fact, vulnerable (in which case, it might be worth reconsidering your use of it). Can you provide URLs where this occurs?
======
Thrawn
------------
Religion is not the opium of the masses. Daily life is the opium of the masses.

True religion, which dares to acknowledge death and challenge the way we live, is an attempt to wake up.
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/62.0.3202.94 Chrome/62.0.3202.94 Safari/537.36
SafeTex

Re: Always block cross script for this site

Post by SafeTex »

Hello Thrawn

I've had the same site that I often use throw up the cross script warning 3 times this morning already although I've said "Always block document requests from https://s.yimg.com to https://adserver.adtechus.com

Warnings like

NoScript detected a potential Cross-Site Scripting attack

from https://s.yimg.com to https://adserver.adtechus.com.

Suspicious data:

(URL) https://adserver.adtechus.com/adiframe/3.0/5359.1/4418312/0/170/ADTECH; target=_blank;grp=[group];misc=8580557100183654498;rdclick=https://na.ads.yahoo.com/yax/clk?sn=f81b62f956a0d0158b5cccf2b043d23cd52de84d&es=.flOrqXRVIOa61hu211PkKbkQFb6IFUJTdbyGioAXSfF9bczmJ5VuY5_52UKAyP.uRAtW7YJD8JXsWKP1kWFoLIXcf_EJKfrEwAa5y96RB5TZXDJZBCajP.83sbvD3_QuQI_LIV4HM7Zt8JBnIl9zsT5Bb6hrchbmh8wFvkEL3_Yv20FtWvs.JIqjXInISFUBYur6sfpn2ll_7N752a2N10_kRnts3lT6lsHAlYpX9_J6wXmEeLwEaIu5DE6KMvLpCLGBLks7Vp9AJfwVVDnBaxbYH5cgHkhlapo2CsoRzJstZK3ly6cPHBdhwUrG4n662wqrcT9z7wZGuZcwNa2N.vD&ve=2&ty=0&brxw=true&sasc=4&yredirect=http://pr.ybp.yahoo.com/cj/cd/4XVoNkOE-LFvuf-4r1FnL5OYtqpcQdDthPPbieSQByaEXJHCZU2ByT9kVaLjR_r0M0Q2sEK8Jq8drNuW5UePzq3QZjl9-nIlurUcf-HnaHM/rurl/
Last edited by barbaz on Mon Dec 04, 2017 1:58 pm, edited 1 time in total.
Reason: kill board-generated links
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0
Post Reply