Page 1 of 1
[RESOLVED] xss filter blocks something
Posted: Thu Jul 23, 2009 4:18 am
by leonhard
for example, a.qidian.com and b.qidian.com logically belongs to the same website, a web page from a.qidian.com includes some script from b.qidian.com, then the xss filter blocks the script, cause the page blank....
this thing happens since 1.9.6.8/9
and xss option of noscript and the regular expression seems not work
anyone can help? thanks!
Re: xss filter blocks something
Posted: Thu Jul 23, 2009 7:00 am
by GµårÐïåñ
Have you tried the latest dev build? If not, try it and then get back to us.
http://noscript.net/getit#devel
Re: xss filter blocks something
Posted: Thu Jul 23, 2009 7:46 am
by leonhard
1.9.6.92 still not work
info from the firefox error console
-------------------------
[NoScript] Blocking cross site Javascript served from
http://files.qidian.com/Author7/1293814/24352899.txt with wrong type info text/plain and included by
http://www.qidian.com/BookReader/1293814,24352899.aspx
-------------------------
Re: xss filter blocks something
Posted: Thu Jul 23, 2009 8:37 am
by GµårÐïåñ
This seems to be an issue with how they are declaring their types and an issue that Giorgio has been trying to workaround as a courtesy but needs to be fixed at the source and is not an NS issue AFAIK.
Re: xss filter blocks something
Posted: Thu Jul 23, 2009 10:49 am
by Giorgio Maone
Could you check
latest development build 1.9.6.93? Thanks.
Re: xss filter blocks something
Posted: Thu Jul 23, 2009 5:17 pm
by leonhard
yes, 1.9.6.93 works!
thanks!