Page 1 of 1

noscript always forgets imdb xss settings

Posted: Sat Dec 09, 2017 2:57 am
by nathanpeters
Every time I visit imdb.com I get an xss warning:

NoScript detected a potential Cross-Site Scripting attack
from http://www.imdb.com to http://ia.media-imdb.com.
Suspicious data:
window.name

Every time I choose : **Always** allow requests from imdb to ia.media-imdb.com (I did *not* choose only allow once)

Every time I close the browser and re-open the site I get the warning again.

What gives?

Why is noscript not saving this "always allow" setting and forgetting it ?

Re: noscript always forgets imdb xss settings

Posted: Sat Dec 09, 2017 3:02 am
by barbaz
What version of NoScript are you using?

Re: noscript always forgets imdb xss settings

Posted: Sat Dec 09, 2017 3:06 am
by nathanpeters
Firefox 57, Noscript 10.1.5.6 (last updated December 8, 2017 - today).

It's been doing this since It was released for Firefox 57. I didn't have any issues with noscript in Firefox 56.

Re: noscript always forgets imdb xss settings

Posted: Sat Dec 09, 2017 11:20 pm
by Tomatix
nathanpeters wrote:Firefox 57, Noscript 10.1.5.6 (last updated December 8, 2017 - today).

It's been doing this since It was released for Firefox 57. I didn't have any issues with noscript in Firefox 56.
Yes, it was a bug, that XSS settings weren't saved. But for me it works since 10.1.5.6:
x [XSS] Fixed user choices forgot across browser sessions

Maybe try reinstalling NS and restarting FF.

Re: noscript always forgets imdb xss settings

Posted: Tue Dec 12, 2017 5:31 am
by nathanpeters
Uninstalling Noscript and re-installing seems to have worked. I didn't get any additional popups when I visited imdb today.