InformAction Forums

Can someone please tell me what I need to do to stop this error message and to stop no script from doing whatever it is doing in this case.

NoScript filtered a potential cross-site scripting (XSS) attempt from [http://online.wsj.com]. Technical details have been logged to the Console.

I have tried every suggestion of yours that I understand and nothing works.

Thank you for your help.

Phil King

Can you post the related Error Console message.

'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137
usingOldMemoryReporter err=TypeError: Cc['@mozlla.org/memory-reporter-manager;1'] is undefined
'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137
'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137
'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137
DJ JSFirstExec: itp:2543
"[ begin jsfirstexec ]" itp:2543
"[ end jsfirstexec ]" itp:2552
Synchronous XMLHttpRequest on the main thread is deprecated because of its detrimental effects to the end user's experience. For more help http://xhr.spec.whatwg.org/ j_global_slim-static.js:36
usingOldMemoryReporter err=TypeError: Cc['@mozlla.org/memory-reporter-manager;1'] is undefined
'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137
Use of getUserData() or setUserData() is deprecated. Use WeakMap or element.dataset instead. cacheobj.js:829
Using //@ to indicate sourceURL pragmas is deprecated. Use //# instead j_global_slim-static.js:4
DJ JSExec: itp:2562
"[ begin jsexec ]" itp:2562
"[ end jsexec ]" itp:2632
"require script has executed" script.js:2
"oCnt is null" 20140403184327.js:3104
mutating the [[Prototype]] of an object will cause your code to run very slowly; instead create the object with the correct initial [[Prototype]] value using Object.create main.js:380
mutating the [[Prototype]] of an object will cause your code to run very slowly; instead create the object with the correct initial [[Prototype]] value using Object.create script-compiler.js:100
"pageLoaded host:online.wsj.com nodeName:#document" heartbleed.js:108
"site result:1" heartbleed.js:185
Use of Mutation Events is deprecated. Use MutationObserver instead. script-compiler.js:140
'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137
'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137
TypeError: content_document.location is undefined rdb.firefox.overlay.js:76
syntax error infinite_scrolling_rules.json:1
"Porthole: Using built-in browser support" lifp_prod.js:338
TypeError: content_document.location is undefined rdb.firefox.overlay.js:76
'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137
'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137
Use of getPreventDefault() is deprecated. Use defaultPrevented instead. jquery.js:3527
'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137
'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137
[NoScript InjectionChecker] JavaScript Injection in coalesced:///site/4454ret=html&limit=10&r=3003&phint=serverDomain=online.wsj.com, primaryProduct=Online Journal, pageName=WSJ_ITP_pageone, section=WSJ_ITP, articleType=WSJ_Summaries_WSJ_ITP_pageone, subSection=WSJ_ITP_ITP US, contentType=summaries, encryptedUUID=V1-cHBsbGtr, contentChannel=Summaries, isSub=WSJ_reg_yes, edition=Edition_North_America_USA, subsection=WSJ_ITP, __bk_k=In Today's Paper - Wsj.com
(function anonymous() {
serverDomain=online.wsj.com, primaryProduct=Online /* COMMENT_TERMINATOR */
DUMMY_EXPR
})
[NoScript XSS] Sanitized suspicious request. Original URL [http://tags.bluekai.com/site/4454?ret=h ... %20Wsj.com] requested from [http://online.wsj.com/itp?_nocache=1306 ... mg=com-wsj]. Sanitized URL: [http://tags.bluekai.com/site/4454?ret=h ... 8921334973].
TypeError: content_document.location is undefined rdb.firefox.overlay.js:76
mutating the [[Prototype]] of an object will cause your code to run very slowly; instead create the object with the correct initial [[Prototype]] value using Object.create script-compiler.js:100
Use of Mutation Events is deprecated. Use MutationObserver instead. script-compiler.js:140
'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137
usingOldMemoryReporter err=TypeError: Cc['@mozlla.org/memory-reporter-manager;1'] is undefined
'setTimeout' called on an object that does not implement interface Window. script-compiler.js:137

Bluekai is a tracker. I don't know if anything actually malicious is happening here, but I would suggest you leave that XSS warning alone and thank NoScript for potentially saving you.
If you don't want to see any user-facing warning, it would be best to outright block that request: try adding to NoScript Options -> Advanced -> ABE -> USER Does that help, or does it result in you getting a different user-facing warning?

I blocked blukai, and the rest of the trackers, on the drop-down menu and that seems to solve the problem.

Thank you very much.

Phil