Page 1 of 1

10 Buggy XSS dialog; no way to add full domain to exceptions

Posted: Sun Nov 26, 2017 7:38 am
by juozas
I've been using the new version of NoScript for a while, figured most features, except for how to get rid of few XSS window annoyances.

When browsing a subdomain with a custom theme in tumblr, XSS Dialog repeatedly pops up with blank background where I XSS originating from subdomain of tumblr.com to assets.tumblr.com and www.tumblr.com; Adding exception doesn't work properly until I reload the page as same XSS is repeating multiple times; No option to add exception to whole domain, I'd like to have one, as repeating this on multiple subdomains might be quite annoying.
XSS window is white until I right click on it to make it work, Disabling XSS protection from options tab doesn't work, as it get's re-enabled when I re-open the page, clear exceptions button doen't work, must manually edit storage-sync.sqlite to clear them.

Edit: I found that problem about disabling XSS warning posted, that it's no way to disable it too.

Screenshots:
ImageImage
ImageImage

Re: 10 Buggy XSS dialog; no way to add full domain to except

Posted: Sun Nov 26, 2017 9:00 pm
by ughh
I also would like to add that there is no "Always block requests from" option - so the annoying popup appears multiple times asking the same thing over and over on sites with XSS.
Btw, devs, could you make the popup appear in the middle of the screen like in pre v10?

Re: 10 Buggy XSS dialog; no way to add full domain to except

Posted: Mon Nov 27, 2017 1:09 pm
by DaveDub
I also have this problem, blank XSS popups constantly. It would be nice to a have a "deny by default" option.

Re: 10 Buggy XSS dialog; no way to add full domain to except

Posted: Mon Nov 27, 2017 4:52 pm
by pebas
Same problem here. Blank Pop-up until I right click and also like an option to "Always Block" and an "Exception for the whole domain".

My system is Ubuntu 16.04.03 (4.4.0-101-generic), Firefox 57.0 (64-bit) and NoScript 10.1.3c1

Thanks in advance.

Re: 10 Buggy XSS dialog; no way to add full domain to except

Posted: Mon Nov 27, 2017 8:31 pm
by rugk
I think that white popup is a problem of Firefox. (I could also reproduce this with another WebExtension) Are you all using Linux?

I have reported this at https://bugzilla.mozilla.org/show_bug.cgi?id=1421037. If you are affected by this problem, follow the bug there and/or report your system specs, in case that helps them.