InformAction Forums

Hi there
I am not a native speaker, so forgive me if I make some mistakes.
When trying to upload pictures to an ebay seller form, Noscript warns me of a possible XXS attack from [http://csr.ebay.de]. This started after I first used the preview-your-offer function from ebay including the zoom function, which did not work. Before this everything worked fine.I found many forum entries about ebay and XXS problems, so i am very unsure if this is a false-positive from Noscript or a real danger.
I get the same promblem on a WinXP/Firefox/Noscript2.6.6.2 system and a Ubuntu/Firefox/Noscript2.6.6.2 system

Could you search your Error console for "Noscript" and post the messages here?

Just tried to reproduce the problem and found out, it only occurs if ebay.com has not been whitelisted before the upload. Beeing from germany ebay.de is normally enough.
When I allow ebay.com during the upload I get the warning, if it has been whitelisted before that, everything works fine. So I guess its just a false positive, because ebay.com has been enabled before the upload.
sorry for bothering you, but thanks anyway

Sites that have not been whitelisted are subjected to a much more aggressive XSS filter, because they're assumed to be dangerous. Basically, anything remotely resembling an attack will be blocked. Whitelisting the site means that it will be checked more carefully, and only blocked if it really looks like an attack.

I am having the same issue. And ebay is whitelisted