Anomolies in the latest version

General discussion about the NoScript extension for Firefox
Post Reply
antipop
Junior Member
Posts: 43
Joined: Mon Nov 26, 2012 12:47 am

Anomolies in the latest version

Post by antipop »

With NoScript-2.6.8.40 in Firefox-31 on 64-bit Linux Gentoo-Hardened-3.15.10, running in a VM on QEMU, the newly installed NoScript seems to be giving me warnings I have not seen before, like so:

"NoScript filtered a potential cross-site scripting(XSS) attempt from (chrome:). Technical details have been logged to the console."

Here is what I saw in the Console at that point:

"window.controllers is deprecated. Do not use it for UA detection. https-everywhere.js:335
[NoScript XSS] Sanitized suspicious upload to [https://startpage.com/do/metasearch.pl] from [chrome://browser/content/browser.xul]: transformed into a download-only GET request."

That is about all I know, and I can't say I really understand what all that means. It does seem to be happening regularly now, after upgrading to the latest NoScript earlier today.
Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Firefox/31.0
barbaz
Senior Member
Posts: 11066
Joined: Sat Aug 03, 2013 5:45 pm

Re: Anomolies in the latest version

Post by barbaz »

What was the exact search query you entered that triggered that?
*Always* check the changelogs BEFORE updating that important software!
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:31.0) Gecko/20100101 SeaMonkey/2.28
Post Reply