Page 1 of 1

[Solved: inclusion type checking] Help with XSS exception

Posted: Sat Nov 12, 2016 5:07 pm
by bege
I read about regex and related posts here, nevertheless I cannot find the correct exception for this blocking:

[NoScript] Blocking cross-site Javascript served from https://www.img-bahn.de/appcontent/json ... de_DEU.txt with wrong type info text/plain and included by https://reiseauskunft.bahn.de/bin/query ... 1&OK#focus

The exception should include second level domains as https://fahrkarten.bahn.de (https://*.bahn.de/*)

NoScript does not show a message for this blocking although the respective box is checked. Is that correct?

This blocking also happens with XSS deactivated. Why?

I use NoScript 2.9.0.14 in Firefox 49.0.2 on Windows 7 Professional 64 bit SP1

Re: Help with XSS exception

Posted: Sat Nov 12, 2016 5:47 pm
by barbaz
That's not the XSS filter, that's inclusion type checking.

about:config > noscript.inclusionTypeChecking.exceptions
add on the end, separate by a single whitespace

Code: Select all

.img-bahn.de/appcontent/jsonp/*.txt

Re: Help with XSS exception

Posted: Sat Nov 12, 2016 6:09 pm
by bege
Thank you very much :)

Re: [Solved: inclusion type checking] Help with XSS exceptio

Posted: Sat Nov 12, 2016 6:31 pm
by barbaz
You're welcome! Image