Page 1 of 1

XSS protection breaks wifi login page for Amtrack

Posted: Fri Nov 25, 2016 11:49 pm
by WhyNotUseABugTracker
The title pretty much says it. I'm using NoScript 2.9.5.1 with Firefox 50.0 on Linux Mint 17.2 (Quiana). Loading any http page (because Firefox is dumb and can't redirect properly on https pages) would result in the standard XSS warning appearing at the top of the browser and the page would fail to load. I didn't see an option for temporarily disabling the XSS protection, so I disabled NoScript and was able to login as usual. After logging into the WiFi, I could browse as usual with NoScript re-enabled.

I expect this is a problem with other login-required WiFi pages, but for obvious reasons I can't test those.

This is my first post on here, so apologies if I missed any rules. I thought posting this might help other people with the same issue. Let me know if I can provide any other information.

Re: XSS protection breaks wifi login page for Amtrack

Posted: Sat Nov 26, 2016 12:06 am
by barbaz
Did you try NoScript latest development build?

Re: XSS protection breaks wifi login page for Amtrack

Posted: Sat Nov 26, 2016 12:36 am
by WhyNotUseABugTracker
barbaz wrote:Did you try NoScript latest development build?
No. I'd like to, but I can't seem to reproduce the problem any more since the WiFi doesn't ask me to re-login, even after changing operating systems and my MAC address. If you can think of a way to force the WiFi to re-authenticate me, I'd be happy to help, but I've reached the limit of my knowledge.

Sorry, perhaps someone else can say whether the problem has been resolved. I do see an XSS over-sensitivity fix in the changelog, so I wouldn't be surprised.

Re: XSS protection breaks wifi login page for Amtrack

Posted: Sat Nov 26, 2016 1:40 am
by barbaz
If you can't manually log out of the Wi-Fi, I wouldn't know anything else to try there either.

I suggest you install the dev build anyway, so that you'll have it - then whenever it is that you next login to this Wi-Fi, please let us know how it works out. Thanks.