Page 1 of 1

Disable the youtube/google+ notifications clickjack popup?

Posted: Sun Nov 17, 2013 6:25 am
by MaximilianKohler
Every time on youtube when I click on the "bell" icon at the top right next to my picture, then click on one of the notifications I get a popup saying "Potential clickjacking/UI redressing attempt!"

Even after unchecking "Keep this element locked (recommended)" I still get the popup.

Also I can't figure out how to unblock this chat http://cevo.com/scrim/4/?tg=53
It only works when I completely disable the noscript addon.

Re: Disable the youtube/google+ notifications clickjack popu

Posted: Thu Dec 12, 2013 6:24 am
by MaximilianKohler
Hmm, still nothing on this? I'm sure lots of people use youtube... it's got to be annoying to get that popup every time...

Re: Disable the youtube/google+ notifications clickjack popu

Posted: Thu Dec 12, 2013 11:55 am
by therube
> clickjack

Did you send the report?
What is its number?

Re: Disable the youtube/google+ notifications clickjack popu

Posted: Thu Dec 12, 2013 5:20 pm
by barbaz
MaximilianKohler wrote:Also I can't figure out how to unblock this chat http://cevo.com/scrim/4/?tg=53
It only works when I completely disable the noscript addon.
When it's blocked, anything related in the Browser Console? (Ctrl-Shift-J)

Re: Disable the youtube/google+ notifications clickjack popu

Posted: Thu Dec 12, 2013 10:49 pm
by MaximilianKohler
therube wrote:> clickjack

Did you send the report?
What is its number?
Oh, ok. I just reported one but didn't get the number, I'll report & get the number on the next one.

This is what I'm talking about btw: http://oi39.tinypic.com/hsrrs9.jpg


barbaz wrote:
MaximilianKohler wrote:Also I can't figure out how to unblock this chat http://cevo.com/scrim/4/?tg=53
It only works when I completely disable the noscript addon.
When it's blocked, anything related in the Browser Console? (Ctrl-Shift-J)
When I try to put it in code tags on here I get:

Ooops, something in your posting triggered my antispam filter...
Please use the "Back" button to modify your content and retry.


So I pasted it here: http://codetidy.com/7539/

Re: Disable the youtube/google+ notifications clickjack popu

Posted: Thu Dec 12, 2013 11:17 pm
by barbaz
MaximilianKohler wrote:When I try to put it in code tags on here
here's the relevant (partially censored) messages:

Code: Select all

14:20:34.798 [NoScript] Blocking cross-site Javascript served from http://jquery-json.googlecode.com/files/jquery.json-2.2.min.js with wrong type info application/x-elc, attachment; filename="jquery.json-2.2.min.js" and included by xxxxx

14:20:35.635 [NoScript] Blocking cross-site Javascript served from http://jquery-json.googlecode.com/files/jquery.json-2.2.min.js with wrong type info application/x-elc, attachment; filename="jquery.json-2.2.min.js" and included by xxxxx

14:20:35.801 [NoScript] Blocking cross-site Javascript served from http://jquery-json.googlecode.com/files/jquery.json-2.2.min.js with wrong type info application/x-elc, attachment; filename="jquery.json-2.2.min.js" and included by xxxxx
so, try going to about:config and adding

Code: Select all

http://jquery-json.googlecode.com
to noscript.inclusionTypeChecking.exceptions

Re: Disable the youtube/google+ notifications clickjack popu

Posted: Thu Dec 12, 2013 11:24 pm
by MaximilianKohler
barbaz wrote:
so, try going to about:config and adding

Code: Select all

http://jquery-json.googlecode.com
to noscript.inclusionTypeChecking.exceptions
Works great! Thanks!

Re: Disable the youtube/google+ notifications clickjack popu

Posted: Fri Dec 13, 2013 11:41 pm
by MaximilianKohler
therube wrote:> clickjack

Did you send the report?
What is its number?
Report ID: 1027885