Page 2 of 2
Re: recurring XSS popup??
Posted: Sun Feb 11, 2018 3:18 pm
by lancelot
The warnings for imdb are finally gone. But now I ran into this:
http://www.telegraph.co.uk/culture/book ... eview.html
gives
NoScript detected a potential Cross-Site Scripting attack
from [...] to
http://www.telegraph.co.uk.
Suspicious data:
(URL)
http://www.telegraph.co.uk/culture/book ... eview.html
What does Suspicious data: URL even mean?
Re: recurring XSS popup??
Posted: Thu Jul 11, 2019 8:44 am
by Guest
It is july 2019 now, running Noscript on Firefox.
This problem with XSS warnings grew over the years, and today it reaches the limit. The end game now is that I cannot click any site in Google (even Google itself) or I need to add it to the 'allowed' list. Even already loaded tabs that I revisit needs it.
One day my memory will be full...
This has become a pointless mechanism.
Noscript has more problems: even with everything trusted on a site, in some cases some parts can be kept blocked without you knowing. Only turning off Noscript will allow you to see them then. It has been that way for years.
Re: recurring XSS popup??
Posted: Thu Jul 11, 2019 11:36 am
by therube
(Was on Yahoo the other day, I was getting a seemingly "endless" number of XSS warnings there, simply by scrolling down the page...?
I simply ignored the popups, best I could. Don't know what triggered it. Doesn't seem to be happening currently.
Maybe there was a rightful reason it was occurring?)
even with everything trusted on a site, in some cases some parts can be kept blocked without you knowing
Where?
It was noted before, that sometimes that occurred with 'disable restrictions for this tab', where 'allow globally' worked.
Re: recurring XSS popup??
Posted: Thu Jul 11, 2019 1:49 pm
by barbaz
Guest wrote: ↑Thu Jul 11, 2019 8:44 am
This has become a pointless mechanism.
Would've been a lot easier for you to just disable the XSS filter than waste time ranting on this forum, wouldn't it?
Guest wrote: ↑Thu Jul 11, 2019 8:44 am
Noscript has more problems: even with everything trusted on a site, in some cases some parts can be kept blocked without you knowing. Only turning off Noscript will allow you to see them then. It has been that way for years.
Vague ranting isn't going to get you any help.