InformAction Forums

barbaz wrote:@jonh try this XSS exception

Code: Select all

^@https://roll\.bankofamerica\.com/

I got it working with I don't understand '//roll\', is this part of the url? In my case it is not.
Is there a reason I should not use the rule I am using, like perhaps it is too permissive?

... and this ABE rule

Code: Select all

Site roll.bankofamerica.com
Accept from .bankofamerica.com
Deny

The ABE rule (with 'roll.' removed) does not work with the XSS I posted above.
I as assuming roll is part of the url, if it is part of the code then I need to find out what it means.

Thanks,

Nicely done figuring the XSS exception and how to modify the ABE rule.

jonh wrote:The ABE rule (with 'roll.' removed) does not work with the XSS I posted above.
I as assuming roll is part of the url, if it is part of the code then I need to find out what it means.

The "roll." is/was part of the URL. Like I said, I was working off of old posts. The site must have changed since then.

In what way doesn't it work with this ABE rule? Please check the Browser Console (Ctrl-Shift-J) when this ABE rule doesn't work and post here any messages related to NoScript.
(related messages usually start with either "[NoScript" or "[ABE]"; if you don't know what's related, turn off CSS warnings and post everything else you see)

barbaz wrote: In what way doesn't it work with this ABE rule?

Code: Select all

Site bankofamerica.com
Accept from .bankofamerica.com
Deny

The above is what I *thought* I typed yesterday but today copy/paste above and it works perfectly.

Sorry for the false alarm.
Thank you for the help.

You're welcome.