[RESOLVED] Mendeley Importer and NoScript

Ask for help about NoScript, no registration needed to post
User avatar
ace28
Posts: 5
Joined: Thu Aug 27, 2015 8:21 am

Re: [RESOLVED] Mendeley Importer and NoScript

Post by ace28 »

Thank you barbaz.

I trust that Mendeley is save enough to add an XSS exeption for it.

Could you please tell me what to write? I could click on 'unsafe reloading' every time (Idk if it is like this in the english version, I just translated it from the german edition). But it would be much more convenient to have an exeption.
I thought what I'd do was I'd pretend I was one of those deaf-mutes. Or should I?
Mozilla/5.0 (Windows NT 10.0; WOW64; rv:40.0) Gecko/20100101 Firefox/40.0
barbaz
Senior Member
Posts: 11142
Joined: Sat Aug 03, 2013 5:45 pm

Re: [RESOLVED] Mendeley Importer and NoScript

Post by barbaz »

This should do:

Code: Select all

^https://www\.mendeley\.com/import/
NoScript Options > Advanced > XSS
*Always* check the changelogs BEFORE updating that important software!
-
User avatar
Thrawn
Master Bug Buster
Posts: 3106
Joined: Mon Jan 16, 2012 3:46 am
Location: Australia
Contact:

Re: [RESOLVED] Mendeley Importer and NoScript

Post by Thrawn »

ace28 wrote:I trust that Mendeley is save enough to add an XSS exeption for it.
I'm not sure what you're basing that on; lots of services, including some far more popular than Mendeley, have XSS holes.

However, depending on what Mendeley actually does, there might not be much sensitive data on that domain to attack?
======
Thrawn
------------
Religion is not the opium of the masses. Daily life is the opium of the masses.

True religion, which dares to acknowledge death and challenge the way we live, is an attempt to wake up.
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:40.0) Gecko/20100101 Firefox/40.0
User avatar
ace28
Posts: 5
Joined: Thu Aug 27, 2015 8:21 am

Re: [RESOLVED] Mendeley Importer and NoScript

Post by ace28 »

Thank you barbaz. The exception works this way!
Thrawn wrote:depending on what Mendeley actually does, there might not be much sensitive data on that domain to attack?
Exactly. Mendeley is only saving references and scholarly PDF files. I use it to save my searches in google scholar and later it helps me to cite, applying the correct citation style. There is no sensitive data included as far as I know.
I thought what I'd do was I'd pretend I was one of those deaf-mutes. Or should I?
Mozilla/5.0 (Windows NT 10.0; WOW64; rv:40.0) Gecko/20100101 Firefox/40.0
barbaz
Senior Member
Posts: 11142
Joined: Sat Aug 03, 2013 5:45 pm

Re: [RESOLVED] Mendeley Importer and NoScript

Post by barbaz »

You're welcome.

BTW, would you like your guest posts in this thread put under your account?
*Always* check the changelogs BEFORE updating that important software!
-
User avatar
ace28
Posts: 5
Joined: Thu Aug 27, 2015 8:21 am

Re: [RESOLVED] Mendeley Importer and NoScript

Post by ace28 »

Sure why not. I made this account in order to be able to edit my posts if I made a mistake again ^^' Maybe I can contribute another time in the future.
I thought what I'd do was I'd pretend I was one of those deaf-mutes. Or should I?
Mozilla/5.0 (Windows NT 10.0; WOW64; rv:40.0) Gecko/20100101 Firefox/40.0
barbaz
Senior Member
Posts: 11142
Joined: Sat Aug 03, 2013 5:45 pm

Re: [RESOLVED] Mendeley Importer and NoScript

Post by barbaz »

Done.
*Always* check the changelogs BEFORE updating that important software!
-
Post Reply