Page 2 of 2

Re: XXS related RequestWatchdog.js hang

Posted: Tue Aug 11, 2009 9:31 pm
by Bohemian
this last error had a message:
[NoScript XSS] xss.reason.Error: XSS checks couldn't complete: DOS attempt? {GET http://l40ghtcrdqj07iki5cd196mh1ocrnsj6 ... signedin=1 <<< http://www.google.com/ig?hl=en&source=iglk&refresh=1, http://www.google.com/ig?hl=en&source=iglk&refresh=1} --- Error("XSS checks couldn't complete: DOS attempt? {GET http://l40ghtcrdqj07iki5cd196mh1ocrnsj6 ... signedin=1 <<< http://www.google.com/ig?hl=en&source=iglk&refresh=1, http://www.google.com/ig?hl=en&source=iglk&refresh=1}")@:0
()@chrome://noscript/content/RequestWatchdog.js:66
()@chrome://noscript/content/Thread.js:100

Re: XXS related RequestWatchdog.js hang

Posted: Tue Aug 11, 2009 11:04 pm
by Giorgio Maone
OK, thanks. Analyzing...

In the meanwhile the following line added in the NoScript Options|Advanced|XSS exceptions box should help:

Code: Select all

^@http://www\.google\.com/ig\b

Re: XXS related RequestWatchdog.js hang

Posted: Fri Aug 28, 2009 8:58 am
by Renato
Hi, I have had the same problem with https://cernaccount.web.cern.ch, and I've tried to whitelist the site, but failed to do it properly (I'm no regex guru), and ended up finding out that the problem ceases if the "Turn cross-site POST requests into data-less GET requests" is turned off.

I'm using Slackware 12.0, firefox 3.5.2, NoScript 1.9.8.7

Hope this bit of information helps your debugging. If more is needed, I'll be glad to help.

Regards,
Renato.

Re: XXS related RequestWatchdog.js hang

Posted: Fri Aug 28, 2009 2:19 pm
by therube
How about posting the XSS message that is generated for you?
And you get it on the particular page that you posted above? Do you need to be logged in for the XSS message to generate?