Page 1 of 1

Bank of Scotland Secure / MasterCard SecureCode

Posted: Thu May 14, 2015 3:59 pm
by Alexander
Hi there,

Sorry for this annoying question. I used to be able to make credit card payments online through Bank of Scotland Secure/MasterCard SecureCode (same thing). I'm sure you'll be familiar with it; you'd enter your payment details into a website, then the little box would appear and say "Processing...", then you'd be redirected to a page saying payment was successful.

However, I just refreshed FireFox and reinstalled NoScript, and it doesn't work anymore. It never advances from "Processing...". I've allowed every script on the page (that is, for every retailer's page that uses it) and I've allowed securesuite.co.uk as well, which seems to be the site that it "works" through. I've also allowed bankofscotland.co.uk and MasterCard's sites, for no particular reason except I thought they might be involved.

If I block securesuite.co.uk, then it uses the script-free version, which would work if it weren't for the XSS filtering. I added a whitelist regex for securesuite but it doesn't work (about that I'm not surprised). I also imported my general whitelist from my old FireFox settings, and it still doesn't work (about that I am surprised). Does anybody have any ideas?

Thank you!

Re: Bank of Scotland Secure / MasterCard SecureCode

Posted: Thu May 14, 2015 6:32 pm
by barbaz
Please post any related messages you see in the Browser Console (Ctrl-Shift-J) when it fails.
(if you don't know what's related, turn off CSS warnings and post everything else you see)

Re: Bank of Scotland Secure / MasterCard SecureCode

Posted: Thu May 14, 2015 11:12 pm
by Thrawn
Can you also post here the regex that you attempted to use?

Re: Bank of Scotland Secure / MasterCard SecureCode

Posted: Fri May 15, 2015 12:52 am
by Alexander
Here is the regex, haha. It will be clear that I don't actually know how to make regexes.

^https?://(www.)?securesuite.co.uk\/?([a-z])*

In a bizarre but fortuitous turn of events, it actually seems to be working now (scripts enabled style), despite nothing changing. It worked on "Safe Mode" FireFox and Internet Explorer, but consistently didn't work on FireFox with NoScript enabled. I have accidentally donated to a guide dogs charity -- perhaps the universe intended this all along. Thanks a lot for your help.

Re: Bank of Scotland Secure / MasterCard SecureCode

Posted: Fri May 15, 2015 1:27 am
by barbaz
wat? Image
Alexander wrote:^https?://(www.)?securesuite.co.uk\/?([a-z])*
Well, even though I can't understand any of what you're saying in that last post, I at least help you optimize that regex a bit:

Code: Select all

^https?://(?:www\.)?securesuite\.co\.uk/[a-z]*
(You don't need to escape / unless you are enclosing the regex in slashes.)

What you had is not bad for someone who knows nothing of regular expressions though.

This tutorial might help you if you care to learn regular expressions.

Re: Bank of Scotland Secure / MasterCard SecureCode

Posted: Fri May 15, 2015 1:31 am
by Guest
Oh, sorry, that was quite garbled!

It seems to be fixed now, even though I didn't change anything. I'm surprised, because the fact that it worked in safe mode and IE seemed to confirm that it was due to NoScript. In the process of trying to generate an error for the log, I accidentally donated to a charity because it actually worked.

Ah, thanks a lot for the help with the regex and the tutorial!

Re: Bank of Scotland Secure / MasterCard SecureCode

Posted: Fri May 15, 2015 1:32 am
by barbaz
You're welcome, and I hope you think that guide dogs are a good cause. ;)
(Well, I do anyway...)