Page 1 of 1

[RESOLVED] XSS problem. FAQ suggestion doesn't help

Posted: Thu Nov 08, 2012 7:44 pm
by glentek
I am trying to execute an ebay saved search. The search is "gizmo (s1,s2) (s3,s4,s5,s6)". Noscript is identifying this a as a potential XSS problem, "sanitizing" the search criteria by removing the parentheses, and that causes the search to return undesired results. Note that the search criteria is only to illustrate the problem, and is not something that I am actually interested in.

I tried entering the suggested FAQ fix which was to add an entry in the Anti-XSS Protection Exceptions, but it does not fix the problem. Any helpful suggestions are welcome.

I tried posting the Error Console output here but could not. There was a message saying a spam filter did not like it.

Re: XSS problem. FAQ suggestion doesn't help

Posted: Thu Nov 08, 2012 9:48 pm
by Giorgio Maone
(resolved after email exchange, by adding the following XSS exceptions line:

Code: Select all

^@https?://my\.ebay\.com/ws/eBayISAPI\.dll\?
)

[Edited to add the missing "?"]

Re: [RESOLVED] XSS problem. FAQ suggestion doesn't help

Posted: Thu Nov 08, 2012 10:04 pm
by glentek
Actually what worked for me was

^@http://my\.ebay\.com/ws/eBayISAPI\.dll\?

Note I changed https to http.

Respecfully....

Re: [RESOLVED] XSS problem. FAQ suggestion doesn't help

Posted: Fri Nov 09, 2012 8:52 am
by Giorgio Maone
Sorry, I did it again. I forgot a "?", just edited the post above to correct it, thanks.