RFE: Make 'cross-site JavaScript' message less confusing
Posted: Wed May 07, 2014 11:00 pm
Many people who come across the cross-site inclusion filter - including therube - have, quite understandably, thought that
Maybe this message could be changed to something like:
was a reference to the XSS filter. Which leads them on a wild-goose chase, and might even cause them to mistakenly write unsafe XSS filter exceptions (regex is hard to get right).Blocking cross-site JavaScript served from...
Maybe this message could be changed to something like:
As an extra, is it feasible to add the cross-site inclusion filter exceptions to Options-Advanced, maybe sharing the ClearClick tab?Blocking third-party JavaScript served from...