XSS false positive: The Simple Dollar and Feedburner
Posted: Mon May 06, 2013 1:10 am
Subscribing to email updates from The Simple Dollar blog lands at feedburner.google.com with an XSS warning:
Unsafe Reload is needed for the subscription to work (otherwise you get a spurious error claiming that email subscriptions are not enabled for the feed).
Is that just because I haven't whitelisted The Simple Dollar? If so, then it's not really an XSS error...
Code: Select all
[NoScript XSS] Sanitized suspicious upload to [http://feedburner.google.com/fb/a/emailverify] from [http://www.thesimpledollar.com/]: transformed into a download-only GET request.
Is that just because I haven't whitelisted The Simple Dollar? If so, then it's not really an XSS error...