winbank XSS exception
Posted: Sun Oct 04, 2015 11:26 am
I get he following error in my console
Which exception is safer
^https?://([a-z]+)\.winbank\.(?:[a-z]{1,3}\.)?[a-z]
or
^@https://[a-z]+\.winbank\.gr/
both of them work ...
Code: Select all
[NoScript XSS] Sanitized suspicious upload to [https://ebanking.winbank.gr/Login.aspx###DATA###something_here.+something_here] from [https://www.winbank.gr/el/Pages/Home.aspx]: transformed into a download-only GET request.^https?://([a-z]+)\.winbank\.(?:[a-z]{1,3}\.)?[a-z]
or
^@https://[a-z]+\.winbank\.gr/
both of them work ...