How to permit Wall Street Journal to do XSS to itself?

[glnz]

Love NoScript but it's too complicated for me to modify. (No complaints; the problems it helps solve are also complicated.)
I have a particular issue and ask for help:
I am a paying subscriber to Wall Street Journal on-line. www.wsj.com
Unfortunately, wsj.com uses tons of third-party scripts for its own content, including reader comments. Wsj.com does not work seamlessly on Firefox with NoScript.
One of the problems is that when I try to open all comments to an article, I get a XSS warning that wsj is trying to do a XSS to itself. The warning mentions only wsj.com, not any third party.
How do I write an XSS exclusion or whitelist entry for wsj.com that might help without letting in third parties?
Thanks.

[barbaz]

Please post here the XSS message(s) you get in the Browser Console (Ctrl-Shift-J) when this happens.

[glnz]

Barbaz - Here is a copy of the console from this symptom. Sorry it's so long. FYI - the red stripes were at the end.

"vidora-client 0.9.9 4561926be78fdee921f6fa12410c6bd1dd47dd22" video.min.js:441:403
"Vidora API finished initializing!" video.min.js:442:438
Expected color but found 'top'. Error in parsing value for 'background-image'. Declaration dropped. livefyre_main.css:1:121801
Expected 'none', URL, or filter function but found 'progid'. Error in parsing value for 'filter'. Declaration dropped. livefyre_main.css:1:121859
Unknown property '-moz-border-radius'. Declaration dropped. livefyre_main.css:1:122141
Unknown property '-moz-box-shadow'. Declaration dropped. livefyre_main.css:1:122313
Expected declaration but found '*'. Skipped to next declaration. livefyre_main.css:1:122665
Error in parsing value for 'background-image'. Declaration dropped. livefyre_main.css:1:122776
Error in parsing value for 'background-image'. Declaration dropped. livefyre_main.css:1:122869
Error in parsing value for 'background-image'. Declaration dropped. livefyre_main.css:1:122994
Error in parsing value for 'background-image'. Declaration dropped. livefyre_main.css:1:123053
Expected color but found 'top'. Error in parsing value for 'background-image'. Declaration dropped. livefyre_main.css:1:123129
Expected 'none', URL, or filter function but found 'progid'. Error in parsing value for 'filter'. Declaration dropped. livefyre_main.css:1:123159
Expected declaration but found '*'. Skipped to next declaration. livefyre_main.css:1:123395
Expected declaration but found '*'. Skipped to next declaration. livefyre_main.css:1:123593
Expected declaration but found '*'. Skipped to next declaration. livefyre_main.css:1:123847
Error in parsing value for 'background-image'. Declaration dropped. livefyre_main.css:1:123961
Error in parsing value for 'background-image'. Declaration dropped. livefyre_main.css:1:124103
Error in parsing value for 'background-image'. Declaration dropped. livefyre_main.css:1:124178
Unknown property '-moz-box-shadow'. Declaration dropped. livefyre_main.css:1:124372
Unknown property '-moz-border-radius'. Declaration dropped. livefyre_main.css:1:124655
Expected declaration but found '*'. Skipped to next declaration. livefyre_main.css:1:124774
Expected declaration but found '*'. Skipped to next declaration. livefyre_main.css:1:124836
Unknown property '-moz-border-radius'. Declaration dropped. livefyre_main.css:1:124920
Expected declaration but found '*'. Skipped to next declaration. livefyre_main.css:1:125039
Expected declaration but found '*'. Skipped to next declaration. livefyre_main.css:1:125078
Error in parsing value for 'background-image'. Declaration dropped. livefyre_main.css:1:125135
Error in parsing value for 'background-image'. Declaration dropped. livefyre_main.css:1:125399
Error in parsing value for 'background-image'. Declaration dropped. livefyre_main.css:1:125535
Expected declaration but found '*'. Skipped to next declaration. livefyre_main.css:1:125814
Unknown property '-moz-border-radius'. Declaration dropped. livefyre_main.css:1:125892
Unknown property '-moz-box-shadow'. Declaration dropped. livefyre_main.css:1:126064
Unknown property '-moz-border-radius'. Declaration dropped. livefyre_main.css:1:128258
Unknown property '-moz-border-radius'. Declaration dropped. livefyre_main.css:1:129520
Error in parsing value for 'background-image'. Declaration dropped. livefyre_main.css:1:130150
Error in parsing value for 'background-image'. Declaration dropped. livefyre_main.css:1:130243
Error in parsing value for 'background-image'. Declaration dropped. livefyre_main.css:1:130368
Error in parsing value for 'background-image'. Declaration dropped. livefyre_main.css:1:130427
Expected color but found 'top'. Error in parsing value for 'background-image'. Declaration dropped. livefyre_main.css:1:130503
Expected 'none', URL, or filter function but found 'progid'. Error in parsing value for 'filter'. Declaration dropped. livefyre_main.css:1:130533
Unknown property '-moz-border-radius'. Declaration dropped. livefyre_main.css:1:130890
Unknown property 'user-select'. Declaration dropped. livefyre_main.css:1:131225
Error in parsing value for 'background-image'. Declaration dropped. livefyre_main.css:1:131370
Error in parsing value for 'background-image'. Declaration dropped. livefyre_main.css:1:131463
Error in parsing value for 'background-image'. Declaration dropped. livefyre_main.css:1:131588
Error in parsing value for 'background-image'. Declaration dropped. livefyre_main.css:1:131647
Expected color but found 'top'. Error in parsing value for 'background-image'. Declaration dropped. livefyre_main.css:1:131723
Expected 'none', URL, or filter function but found 'progid'. Error in parsing value for 'filter'. Declaration dropped. livefyre_main.css:1:131753
Unknown property '-moz-border-radius'. Declaration dropped. livefyre_main.css:1:134558
Error in parsing value for 'line-height'. Declaration dropped. livefyre_main.css:1:135166
Expected end of value but found '34px'. Error in parsing value for 'margin-right'. Declaration dropped. livefyre_main.css:1:139077
Unknown property '-moz-opacity'. Declaration dropped. livefyre_main.css:1:141138
Expected 'none', URL, or filter function but found 'alpha('. Error in parsing value for 'filter'. Declaration dropped. livefyre_main.css:1:141212
Unknown property '-moz-opacity'. Declaration dropped. livefyre_main.css:1:141686
Expected 'none', URL, or filter function but found 'alpha('. Error in parsing value for 'filter'. Declaration dropped. livefyre_main.css:1:141762
Expected declaration but found '*'. Skipped to next declaration. livefyre_main.css:1:141791
Expected declaration but found '*'. Skipped to next declaration. livefyre_main.css:1:142067
Expected declaration but found '*'. Skipped to next declaration. livefyre_main.css:1:142079
Expected declaration but found '*'. Skipped to next declaration. livefyre_main.css:1:142149
Expected declaration but found '*'. Skipped to next declaration. livefyre_main.css:1:142161
Expected declaration but found '*'. Skipped to next declaration. livefyre_main.css:1:142322
Expected declaration but found '*'. Skipped to next declaration. livefyre_main.css:1:142334
Expected declaration but found '*'. Skipped to next declaration. livefyre_main.css:1:142496
Expected declaration but found '*'. Skipped to next declaration. livefyre_main.css:1:142508
Expected declaration but found '*'. Skipped to next declaration. livefyre_main.css:1:142670
Expected declaration but found '*'. Skipped to next declaration. livefyre_main.css:1:142682
Unknown property '-moz-border-radius'. Declaration dropped. livefyre_main.css:1:144459
Unknown property '-moz-border-radius'. Declaration dropped. livefyre_main.css:1:144986
Unknown property '-moz-border-radius'. Declaration dropped. livefyre_main.css:1:145380
Unknown property '-moz-box-shadow'. Declaration dropped. livefyre_main.css:1:145500
Error in parsing value for 'background-image'. Declaration dropped. livefyre_main.css:1:145673
Error in parsing value for 'background-image'. Declaration dropped. livefyre_main.css:1:145766
Error in parsing value for 'background-image'. Declaration dropped. livefyre_main.css:1:145891
Error in parsing value for 'background-image'. Declaration dropped. livefyre_main.css:1:145950
Expected color but found 'top'. Error in parsing value for 'background-image'. Declaration dropped. livefyre_main.css:1:146026
Expected 'none', URL, or filter function but found 'progid'. Error in parsing value for 'filter'. Declaration dropped. livefyre_main.css:1:146056
Error in parsing value for 'background-image'. Declaration dropped. livefyre_main.css:1:146742
Error in parsing value for 'background-image'. Declaration dropped. livefyre_main.css:1:146835
Error in parsing value for 'background-image'. Declaration dropped. livefyre_main.css:1:146960
Error in parsing value for 'background-image'. Declaration dropped. livefyre_main.css:1:147019
Expected color but found 'top'. Error in parsing value for 'background-image'. Declaration dropped. livefyre_main.css:1:147095
Expected 'none', URL, or filter function but found 'progid'. Error in parsing value for 'filter'. Declaration dropped. livefyre_main.css:1:147125
Expected 'none', URL, or filter function but found 'progid'. Error in parsing value for 'filter'. Declaration dropped. livefyre_main.css:1:147238
Error in parsing value for 'background-image'. Declaration dropped. livefyre_main.css:1:147472
Error in parsing value for 'background-image'. Declaration dropped. livefyre_main.css:1:147565
Error in parsing value for 'background-image'. Declaration dropped. livefyre_main.css:1:147690
Error in parsing value for 'background-image'. Declaration dropped. livefyre_main.css:1:147749
Expected color but found 'top'. Error in parsing value for 'background-image'. Declaration dropped. livefyre_main.css:1:147825
Expected 'none', URL, or filter function but found 'progid'. Error in parsing value for 'filter'. Declaration dropped. livefyre_main.css:1:147855
Expected 'none', URL, or filter function but found 'progid'. Error in parsing value for 'filter'. Declaration dropped. livefyre_main.css:1:147968
Unknown property '-moz-box-shadow'. Declaration dropped. livefyre_main.css:1:148144
Unknown property '-moz-border-radius'. Declaration dropped. livefyre_main.css:1:148439
Unknown property '-moz-border-radius'. Declaration dropped. livefyre_main.css:1:148623
Unknown property '-moz-border-radius'. Declaration dropped. livefyre_main.css:1:148984
Unknown property '-moz-border-radius'. Declaration dropped. livefyre_main.css:1:149532
Unknown property '-moz-border-radius'. Declaration dropped. livefyre_main.css:1:149958
Unknown property '-moz-border-radius'. Declaration dropped. livefyre_main.css:1:150181
Unknown property '-moz-border-radius'. Declaration dropped. livefyre_main.css:1:150401
Error in parsing value for 'max-width'. Declaration dropped. livefyre_main.css:1:151037
Unknown property '-moz-border-radius'. Declaration dropped. livefyre_main.css:1:151321
JavaScript 1.6's for-each-in loops are deprecated; consider using ES6 for-of instead ScriptSurrogate.js:302:199
JavaScript 1.6's for-each-in loops are deprecated; consider using ES6 for-of instead ScriptSurrogate.js:345:1634
Use of Mutation Events is deprecated. Use MutationObserver instead. livefyre_base.js:81:0
Use of Mutation Events is deprecated. Use MutationObserver instead. the-trigger-happy-generation-1432245600:81:0
Expected ';' or '}' to terminate declaration but found '!'. Declaration dropped. the-trigger-happy-generation-1432245600:1:60
JavaScript 1.6's for-each-in loops are deprecated; consider using ES6 for-of instead ScriptSurrogate.js:346:1634
Unknown property '-moz-border-radius'. Declaration dropped. editor.css:1:543
Unknown property '-moz-border-radius'. Declaration dropped. editor.css:1:1011
Unknown property '-moz-box-shadow'. Declaration dropped. editor.css:1:1152
Unknown property '-moz-text-shadow'. Declaration dropped. editor.css:1:1633
Unknown property '-moz-box-shadow'. Declaration dropped. editor.css:1:2850
Unknown property '-moz-box-shadow'. Declaration dropped. editor.css:1:3047
Unknown property '-moz-box-shadow'. Declaration dropped. editor.css:1:4739
Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:4817
Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:4910
Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:5035
Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:5094
Expected color but found 'top'. Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:5170
Expected 'none', URL, or filter function but found 'progid'. Error in parsing value for 'filter'. Declaration dropped. editor.css:1:5200
Unknown property '-moz-border-radius'. Declaration dropped. editor.css:1:5791
Unknown property '-moz-opacity'. Declaration dropped. editor.css:1:7210
Expected 'none', URL, or filter function but found 'alpha('. Error in parsing value for 'filter'. Declaration dropped. editor.css:1:7284
Unknown property '-moz-opacity'. Declaration dropped. editor.css:1:7363
Expected 'none', URL, or filter function but found 'alpha('. Error in parsing value for 'filter'. Declaration dropped. editor.css:1:7439
Unknown property '-moz-opacity'. Declaration dropped. editor.css:1:7877
Expected 'none', URL, or filter function but found 'alpha('. Error in parsing value for 'filter'. Declaration dropped. editor.css:1:7951
Unknown property '-moz-opacity'. Declaration dropped. editor.css:1:8030
Expected 'none', URL, or filter function but found 'alpha('. Error in parsing value for 'filter'. Declaration dropped. editor.css:1:8106
Unknown property '-moz-border-radius'. Declaration dropped. editor.css:1:8512
Unknown property '-moz-border-radius'. Declaration dropped. editor.css:1:8905
Unknown property '-moz-opacity'. Declaration dropped. editor.css:1:9685
Expected 'none', URL, or filter function but found 'alpha('. Error in parsing value for 'filter'. Declaration dropped. editor.css:1:9762
Unknown property '-moz-border-radius'. Declaration dropped. editor.css:1:10022
Unknown property '-moz-box-shadow'. Declaration dropped. editor.css:1:10152
Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:10410
Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:10503
Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:10628
Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:10687
Expected color but found 'top'. Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:10763
Expected 'none', URL, or filter function but found 'progid'. Error in parsing value for 'filter'. Declaration dropped. editor.css:1:10793
Unknown property '-moz-border-radius'. Declaration dropped. editor.css:1:11086
Unknown property '-moz-border-radius'. Declaration dropped. editor.css:1:11627
Unknown property '-moz-box-shadow'. Declaration dropped. editor.css:1:12286
Unknown property '-moz-border-radius'. Declaration dropped. editor.css:1:12770
Unknown property '-moz-box-shadow'. Declaration dropped. editor.css:1:12894
Unknown property '-moz-border-radius'. Declaration dropped. editor.css:1:13764
Unknown property '-moz-box-shadow'. Declaration dropped. editor.css:1:13936
Unknown property '-moz-border-radius'. Declaration dropped. editor.css:1:15852
Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:16680
Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:16773
Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:16898
Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:16957
Expected color but found 'top'. Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:17033
Expected 'none', URL, or filter function but found 'progid'. Error in parsing value for 'filter'. Declaration dropped. editor.css:1:17063
Unknown property '-moz-border-radius'. Declaration dropped. editor.css:1:17407
Unknown property '-moz-border-radius'. Declaration dropped. editor.css:1:18372
Unknown property '-moz-border-radius'. Declaration dropped. editor.css:1:18618
Unknown property '-moz-border-radius'. Declaration dropped. editor.css:1:19231
Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:19393
Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:19486
Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:19611
Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:19670
Expected color but found 'top'. Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:19746
Expected 'none', URL, or filter function but found 'progid'. Error in parsing value for 'filter'. Declaration dropped. editor.css:1:19776
Unknown property '-moz-box-shadow'. Declaration dropped. editor.css:1:20649
Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:20851
Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:20944
Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:21069
Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:21128
Expected color but found 'top'. Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:21204
Expected 'none', URL, or filter function but found 'progid'. Error in parsing value for 'filter'. Declaration dropped. editor.css:1:21234
Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:23083
Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:23176
Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:23301
Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:23360
Expected color but found 'top'. Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:23436
Expected 'none', URL, or filter function but found 'progid'. Error in parsing value for 'filter'. Declaration dropped. editor.css:1:23466
Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:23774
Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:23867
Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:23992
Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:24051
Expected color but found 'top'. Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:24127
Expected 'none', URL, or filter function but found 'progid'. Error in parsing value for 'filter'. Declaration dropped. editor.css:1:24157
Expected media feature name but found '-webkit-min-device-pixel-ratio'. editor.css:1:25494
Expected media feature name but found '-webkit-min-device-pixel-ratio'. editor.css:1:26440
Expected media feature name but found '-webkit-min-device-pixel-ratio'. editor.css:1:27398
Expected media feature name but found '-webkit-min-device-pixel-ratio'. editor.css:1:27932
Expected media feature name but found '-webkit-min-device-pixel-ratio'. editor.css:1:28356
Unknown property '-moz-border-radius'. Declaration dropped. editor.css:1:28788
Unknown property '-moz-border-radius'. Declaration dropped. editor.css:1:31584
Unknown property 'user-select'. Declaration dropped. editor.css:1:31871
Expected media feature name but found '-webkit-min-device-pixel-ratio'. editor.css:1:32080
Expected media feature name but found '-webkit-min-device-pixel-ratio'. editor.css:1:32649
Unknown property '-moz-border-radius'. Declaration dropped. editor.css:1:33598
Expected media feature name but found '-webkit-min-device-pixel-ratio'. editor.css:1:34745
Unknown property '-moz-border-radius'. Declaration dropped. editor.css:1:35532
Unknown property '-moz-border-radius'. Declaration dropped. editor.css:1:35928
Unknown property '-moz-border-radius'. Declaration dropped. editor.css:1:36615
Unknown property '-moz-box-shadow'. Declaration dropped. editor.css:1:36787
Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:37072
Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:37165
Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:37290
Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:37349
Expected color but found 'top'. Error in parsing value for 'background-image'. Declaration dropped. editor.css:1:37425
Expected 'none', URL, or filter function but found 'progid'. Error in parsing value for 'filter'. Declaration dropped. editor.css:1:37455
Unknown property '-moz-border-radius'. Declaration dropped. editor.css:1:37847
Unknown property '-moz-box-shadow'. Declaration dropped. editor.css:1:37961
This site makes use of a SHA-1 Certificate; it's recommended you use certificates with signature algorithms that use hash functions stronger than SHA-1.[Learn More] 50.jpg
This site makes use of a SHA-1 Certificate; it's recommended you use certificates with signature algorithms that use hash functions stronger than SHA-1.[Learn More] 50.jpg

[barbaz]

eh, looks like the XSS messages got cut off by the massive amounts of CSS warnings.
Wild guessing time:
NoScript Options > Advanced > XSS
Does adding this exception help?

Code: Select all

^@https?://([^/:]+\.)?wsj\.com/

(It allows wsj.com to XSS anything. If you can get more info, or find some way for the XSS messages to not be pushed out, we might be able to help you come up with a safer exception than that.)

FYI - the red stripes were at the end.

I think the XSS messages would be either orange or gray striped. I forget which.