Page 1 of 1

Cannot Copy out of Console2 when open from XSS Notification

Posted: Thu Nov 15, 2012 2:46 am
by therube
Cannot Copy (text) out of Console² (like Error Console) when opened from NoScript XSS notification, Show Console...

http://forums.mozillazine.org/viewtopic ... #p12480797

install NoScript
install Console2
open a page that generates an XSS warning
use NoScript XSS notification to 'Show Console...'

Error Console (Console2) opens

attempt to copy text out from Console2

text is not copied

SeaMonkey is affected.
FF looks not to be.

Re: Cannot Copy out of Console2 when open from XSS Notificat

Posted: Thu Nov 15, 2012 8:37 am
by Giorgio Maone
Are you able to copy any other Console2 message on Seamonkey?
If not, does disabling NoScript help?

Re: Cannot Copy out of Console2 when open from XSS Notificat

Posted: Thu Nov 15, 2012 4:17 pm
by therube
> Are you able to copy any other Console2 message on Seamonkey?

Not if I open Console2 from an (NoScript) XSS warning dialog.
Otherwise, if I manually open Console2, either by shortcut or menu, then yes.

> If not, does disabling NoScript help?

Well yes, but then I have no way to generate an XSS warning dialog ;-).


Phil posted a suggested fix.

Re: Cannot Copy out of Console2 when open from XSS Notificat

Posted: Thu Nov 15, 2012 10:24 pm
by Giorgio Maone
Phil's fix will be included in next dev build, thanks.

Re: Cannot Copy out of Console2 when open from XSS Notificat

Posted: Mon Nov 19, 2012 3:19 pm
by therube
Resolved, thank you :-).

Code: Select all

http://www.yoursite.com/index.html?name=<script>alert('You just found a XSS vulnerability')</script>