Page 1 of 1

XSS popup even after site closed

Posted: Thu Nov 23, 2017 5:17 pm
by sb5k
I find that even after closing Firefox - and rebooting - I get NoScript xss popups for a site I had gone to earlier but closed.

Is there a way to tell if the site left something active, even if I didn't re-open the page?

Or is NoScript xss notification just repeating something?

Also, please add "Always block requests from/to" so I don't have to see these popups all the time. It seems that every site that links to Facebook generates an XSS popup, and since I don't use Facebook, I'd like to set those to always block.

Re: XSS popup even after site closed

Posted: Thu Nov 23, 2017 5:54 pm
by djl47
I have seen quite a bit of squirrely strangeness with these popups. On my system they are often empty, they popup on a different monitor and when they do load content I cannot tell which tab/window triggered the event.

Re: XSS popup even after site closed

Posted: Thu Nov 23, 2017 8:06 pm
by grizzler
There is a 'set' of sites I need, which has a login mechanism NoScript appears to think is using XSS. I cannot log in there. Whenever I call up the login window, an (empty) XSS popup appears. This happens even if I switch off everything related to NoScript, both in its own settings window (which will still lock firefox solid if I'm not carefull) and the add-on manager.

I have never had so much trouble just trying to get some work done!

This thing is now officially a piece of useless junk, making it impossible for me to be productive.

And it's gone. It will need to improve a lot before I let it back on my machines.