InformAction Forums

Hi - after updating noscript and restarting my browser today I was presented with the release notes page as usual (http://noscript.net/?ver=2.6.8.4&prev=2.6.7.1).

What was unusual was that the page contained an iframe whos source was blocked by my company's web security appliance due to it being used to serve malware.

After refreshing the page, the iframe disappeared. I'm wondering if anyone else is seeing this?

Thanks

I have the malware url and diffs of the html served for the clean page and the malware page if that's helpful.

It seems this may just be a fundamental issue with http though - perhaps I was MITM'd. Time to make noscript.net https?

Thanks

I haven't seen this occur, no.

Giorgio does serve the actual addons over https (on secure.informaction.com), but not the NoScript or Flashgot websites.

I heard about ESET false positives about AfterDownload ad units (which are loaded in iframes), recently. Nothing to be worried about.