InformAction Forums

Posted: **Mon Sep 28, 2015 12:40 pm**

Suggest adding chrome://browser/content/browser.xul to allow Firefox search box to work when xss filtering turned on.

Posted: **Mon Sep 28, 2015 4:55 pm**

-1 to this request, too many problems with it.
It inhibits testing of XSS filter and may make false positives harder to spot. And it's actually

Code: Select all

^@chrome://browser/content/browser\.xul$

And for SeaMonkey it'd be

Code: Select all

^@chrome://navigator/content/navigator\.xul$

so you can't really have a set default, otherwise you're likely to be doing the dangerous thing of whitelisting a URL which by default points to nothing.

Can you post here the contents of the searchplugin's xml file as well as post the query that the XSS filter is messing with?

InformAction Forums

Suggest adding XSS default rule

Suggest adding XSS default rule

Re: Suggest adding XSS default rule