XSS warning loop issue

Ask for help about NoScript, no registration needed to post
Kerta

XSS warning loop issue

Post by Kerta »

I am currently stuck with an XSS warning loop running both current NoScript and current Firefox whenever I visit several websites. Most consistently, tumblr user pages.
The message I am getting is:

NoScript detected a potential Cross-Site Scripting attack
from [tumblr user page] to [tumblr assets server]
Suspicious data:
window.name

No matter what options I choose, including "Allow all" results in the window popping up again and again until I give up and leave the page. The message is always exactly the same with the only variance being the user page depending on which page I am on at the time. Exact sites edited out due to triggering spam filter, but pretty much every user page causes it for me. Is there any way to fix this?
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.84 Safari/537.36
MakoSDV

Re: XSS warning loop issue

Post by MakoSDV »

I just ran into the same problem. I just had to completely disable XSS in NoScript and then restart my browser to get the warning to stop popping up.
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0
iank
Posts: 1
Joined: Sun Jan 07, 2018 10:06 pm

Re: XSS warning loop issue

Post by iank »

I'm having the same issue. The prompt won't go away until the browser restarts then it comes back when I visit an offending page, so it's not a solution. I just put it into a far away virtual desktop and ignore it, but I'd love for this to be fixed.
Mozilla/5.0 (X11; Linux x86_64; rv:57.0) Gecko/20100101 Firefox/57.0
User avatar
Giorgio Maone
Site Admin
Posts: 9546
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: XSS warning loop issue

Post by Giorgio Maone »

Working on it, will be fixed in next release, thanks.
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0
Post Reply