Page 2 of 2

Re: Issues using applications on Facebook

Posted: Thu Dec 17, 2009 1:35 am
by m_c
There are several more apps on facebook which creates an xss error. Sometimes reload works, sometimes not. (in mafiawars it could that I lose some gifts :lol: )

Is facebook still secured for xss attacks if I do this:
lllbob wrote:...
I Fixed it by doing this:
A: Go to Noscript Options.
B: Click the Advanced tab.
C: Click the XSS tab.
D: Add these entries to the Exceptions. Right below the stumbleupon entry.
http://mwfb.static.zynga.com
http://www.facebook.com
E: Click Ok...

Re: Issues using applications on Facebook

Posted: Thu Dec 17, 2009 4:38 pm
by Giorgio Maone
m_c wrote:Is facebook still secured for xss attacks if I do this:
No, it's not.
Exceptions should be more specific than these.
I could help if I can see the specific warnings you get.

Re: Issues using applications on Facebook

Posted: Thu Dec 17, 2009 6:46 pm
by m_c

Code: Select all

...

Code: Select all

...

Code: Select all

...
Image

I don't know what exactly you need.
First 3 quotes are console entries, fourth one is screenshot of the "alert" window.

I noticed that xss menu entries on browser window's top are changed every time I open the menu. Bug?
First click, second click.

Using Firefox 3.5.6, NoScript 1.9.9.25

Re: Issues using applications on Facebook

Posted: Thu Dec 17, 2009 10:34 pm
by m_c
Mafiawars seems to be fixed. :) Thx :)

Re: Issues using applications on Facebook

Posted: Thu Dec 17, 2009 10:40 pm
by Giorgio Maone
m_c wrote:Mafiawars seems to be fixed. :) Thx :)
In 1.9.9.26 you mean, right?

Re: Issues using applications on Facebook

Posted: Thu Dec 17, 2009 11:00 pm
by m_c
Giorgio Maone wrote:...In 1.9.9.26 you mean, right?
Yes, in lastest version of NoScript.

Now I'm unable to test for this strange xss menu entry thing anymore.