Page 1 of 1

XSS warning on Youtube since 2/3 days

Posted: Thu Aug 24, 2017 7:55 pm
by jajaneenee
Hi,

I get Cross Site Scripting (XSS) attempt warnings on youtube since a few days. I've reset Noscript and still get them. I don't think there is a real Cross Site Scripting (XSS) attempt, but just to be sure here more info:

This is in the console:

[NoScript XSS] Sanitized suspicious request. Original URL [https://apis.google.com/u/0/_/hovercard ... n=38157986] requested from [https://www.youtube.com/watch?v=vSYsY0JKMyc]. Sanitized URL: [https://apis.google.com/#49928547634376674312].
Warning: ‘nsIOService::NewChannelFromURI()’ deprecated, please use ‘nsIOService::NewChannelFromURI2()’ session.js:273:38
Warning: ‘nsIOService::NewChannelFromURI()’ deprecated, please use ‘nsIOService::NewChannelFromURI2()’ session.js:273:38
Warning: ‘nsIOService::NewChannelFromURI()’ deprecated, please use ‘nsIOService::NewChannelFromURI2()’ session.js:273:38
IndexedDB UnknownErr: ActorsParent.cpp:599 (unknown)
UnknownError indexed-db.js:59:9
undefined Promise-backend.js:935

Re: XSS warning on Youtube since 2/3 days

Posted: Thu Aug 24, 2017 8:50 pm
by Giorgio Maone
It's a known problem which should already have been fixed.
Are you using latest version 5.0.9?