Page 1 of 1

Redirect in <noscript> tag to mgchashgate

Posted: Wed May 28, 2014 3:37 pm
by Martin E
Hi there,

First of all, thanks for the great tool. It saves me a lot of worries.

Recently I stumbled upon a redirect where ther was none before. Upon researching it I found out it is a redirect inside the noscript tag.

This is the code (On the site I found it, it is located even above <!DOCTYPE..):

Code: Select all

<script language='javascript' src='//mgwlock.com/cpalocker/?a=get&cid=5692'></script><noscript>Enable Javascript to access this page. Powered by the <a href="http://mgcashgate.com">MGCash</a><meta http-equiv="refresh" content="0;url=http://mgcashgate.com/nojsnotice.html"/></noscript><script>if(typeof _mgAdNotBlocked=="undefined"){document.location="http://mgcashgate.com/adblocknotice.php?from="+escape(document.location)}</script>
Is there any way of blocking that?

Thanks in advance

Martin E

Re: Redirect in <noscript> tag to mgchashgate

Posted: Wed May 28, 2014 3:47 pm
by barbaz
about:config -> set accessibility.blockautorefresh to true

Re: Redirect in <noscript> tag to mgchashgate

Posted: Wed May 28, 2014 7:39 pm
by therube
Shouldn't (or rather why doesn't) NoScript's | Advanced | Untrusted -> Forbid META redirections... block it?

Code: Select all

<noscript>
Enable Javascript to access this page. Powered by the <a href="http://mgcashgate.com">MGCash</a>
        <meta http-equiv="refresh" content="0;url=http://www.google.com"/>
</noscript>

Code: Select all

<html>
<head>
</head>
<body>
<noscript><meta http-equiv="refresh" content="0;url=http://www.google.com/"></noscript>
</body>
</html>
(replaced the head, body, which was in my sample but removed when first posting here)

Re: Redirect in <noscript> tag to mgchashgate

Posted: Wed May 28, 2014 7:52 pm
by therube

Re: Redirect in <noscript> tag to mgchashgate

Posted: Wed May 28, 2014 8:19 pm
by therube
And from the linked thread, this is successfully blocked:

Code: Select all

<html>
<head>
</head>
<body>
<noscript><meta http-equiv="refresh" content="0;url=://www.google.com/"></noscript>
</body>
</html>

Code: Select all

url=://www.google.com
vs

Code: Select all

url=http://www.google.com

(protocol relative urls)