InformAction Forums

the problem is that when we have a XSS warning the browser freezes for some seconds ... very annoying

i can't mark bluekai as untrusted ... so what is the solution ?

gvp wrote:the problem is that when we have a XSS warning the browser freezes for some seconds ... very annoying

Sorry, I misunderstood your point.
In that case XSS exception for requests to bluekai, coupled with an ABE rule to completely block all requests to bluekai as suggested above, is indeed the best solution. That's not dangerous because ABE would then block those requests so it doesn't matter what the XSS filter does or doesn't do, the end result is the same.

barbaz wrote:

gvp wrote:the problem is that when we have a XSS warning the browser freezes for some seconds ... very annoying

Sorry, I misunderstood your point.

the point is, whenever I have a XSS warning the firefox freezes for some seconds ... and when it unfreezes the XSS warning appears ... is this normal ?

barbaz wrote:In that case XSS exception for requests to bluekai, coupled with an ABE rule to completely block all requests to bluekai as suggested above, is indeed the best solution. That's not dangerous because ABE would then block those requests so it doesn't matter what the XSS filter does or doesn't do, the end result is the same.

this works quite well ...

gvp wrote:the point is, whenever I have a XSS warning the firefox freezes for some seconds ... and when it unfreezes the XSS warning appears ... is this normal ?

I'd say it can be, other users have reported likewise. It depends what the XSS filter has to do.

gvp wrote:

barbaz wrote:In that case XSS exception for requests to bluekai, coupled with an ABE rule to completely block all requests to bluekai as suggested above, is indeed the best solution. That's not dangerous because ABE would then block those requests so it doesn't matter what the XSS filter does or doesn't do, the end result is the same.

this works quite well ...

As mentioned earlier, it would also be theoretically possible to write a surrogate designed to remove the trigger. Probably would need more investigation, but it would be quieter.