[Invalid] XSS Notifications Not Being Logged In SeaMonkey

Bug reports and enhancement requests
Post Reply
User avatar
therube
Ambassador
Posts: 7972
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

[Invalid] XSS Notifications Not Being Logged In SeaMonkey

Post by therube »

It looks like XSS Notifications are Not Being Logged In SeaMonkey ?

URL: http://www.abelhadigital.com/multihasher

I do get the Yellow warning line in the browser window, I can open Error Console from the NoScript icon (XSS->) or from the warning Option..., but I'm not seeing anything "NoScript" or "XSS" in Error Console.

(It is logged in FF.)
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:30.0) Gecko/20100101 Firefox/30.0 SeaMonkey/2.27a2
User avatar
Thrawn
Master Bug Buster
Posts: 3106
Joined: Mon Jan 16, 2012 3:46 am
Location: Australia
Contact:

Re: XSS Notifications Not Being Logged In SeaMonkey

Post by Thrawn »

Firefox has moved to the Browser Console instead of the Error Console...maybe NS is trying to log there instead? (Does Seamonkey have a Browser Console?)
======
Thrawn
------------
Religion is not the opium of the masses. Daily life is the opium of the masses.

True religion, which dares to acknowledge death and challenge the way we live, is an attempt to wake up.
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0
barbaz
Senior Member
Posts: 11109
Joined: Sat Aug 03, 2013 5:45 pm

Re: XSS Notifications Not Being Logged In SeaMonkey

Post by barbaz »

Thrawn wrote:Firefox has moved to the Browser Console instead of the Error Console...maybe NS is trying to log there instead?
That's not it. If you type this in the address bar

Code: Select all

http://0.0.0.0/<script>
NS complains and the related messages are in the Error Console, under Messages...
My guess is that the Error Console is flooded with too many CSS warnings to be able to keep the XSS messages in the list.

(@therube, I'm not seeing any XSS warning at all on that URL... Go there, see nothing, so Temp-Allow the top-level domain, and... still nothing.)
Thrawn wrote:(Does Seamonkey have a Browser Console?)
Sadly not, and it doesn't look possible to add it as an extension either :cry:
*Always* check the changelogs BEFORE updating that important software!
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:29.0) Gecko/20100101 Firefox/29.0 SeaMonkey/2.26a2
User avatar
therube
Ambassador
Posts: 7972
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: XSS Notifications Not Being Logged In SeaMonkey

Post by therube »

OK, I see that.
My guess is that the Error Console is flooded with too many CSS warnings to be able to keep the XSS messages in the list.
That must be it.
I'd clear the Console, open the link in a new tab, & there are a ton of messages. Just didn't expect it to be of such a number that I would loose the wanted XSS message.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:30.0) Gecko/20100101 Firefox/30.0 SeaMonkey/2.27a2
Post Reply