Huffington Post (HuffPo) Germany - Not able to read Comments
Posted: Sat Dec 16, 2017 12:28 pm
Hi together. Since Years I have the Problem reading Comments in the HuffPo, i.e. here: http://www.huffingtonpost.de/entry/merk ... e-homepage
First I thought that had to do with a blocked script but that was definetely not the Reason. Only Disabling NoScript completely brought Help. The reason seams to be the XSS Cross Site Scripting, in this case XSS [http://www.huffingtonpost.de]->[https://www.facebook.com]
In the console I found this one relating to the above:
Any Idea what to do despite disabling NoScript? And easy explained please, i am not a Teckie 
Thank you in Advance and have a nice X-Mas Time
First I thought that had to do with a blocked script but that was definetely not the Reason. Only Disabling NoScript completely brought Help. The reason seams to be the XSS Cross Site Scripting, in this case XSS [http://www.huffingtonpost.de]->[https://www.facebook.com]
In the console I found this one relating to the above:
Code: Select all
getUserData() oder setUserData() sollten nicht mehr verwendet werden. Verwenden Sie stattdessen WeakMap oder element.dataset. requestNotifier.js:53:0
[NoScript InjectionChecker] JavaScript Injection in ///plugins/comments.php?api_key=137920063083844&channel_url=http://staticxx.facebook.com/connect/xd_arbiter/r/lY4eZXm_YWu.js?version=42#cb=f666f981c50036&domain=www.huffingtonpost.de&origin=http://www.huffingtonpost.de/f30f36b538e6e0e&relation=parent.parent&colorscheme=light&href=http://www.huffingtonpost.de/entry/merkel-schulz-groko-theater_de_5a33d8fbe4b0ff955ad22ad3&locale=de_DE&numposts=10&sdk=joey&skin=light&version=v2.5&width=570
(function anonymous() {
www.huffingtonpost.de/f30f36b538e6e0e&relation==parent.parent&colorscheme==light
})
[NoScript XSS] Eine verdächtige Anfrage wurde bereinigt. Original-URL [https://www.facebook.com/plugins/comments.php?api_key=137920063083844&channel_url=http%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FlY4eZXm_YWu.js%3Fversion%3D42%23cb%3Df666f981c50036%26domain%3Dwww.huffingtonpost.de%26origin%3Dhttp%253A%252F%252Fwww.huffingtonpost.de%252Ff30f36b538e6e0e%26relation%3Dparent.parent&colorscheme=light&href=http%3A%2F%2Fwww.huffingtonpost.de%2Fentry%2Fmerkel-schulz-groko-theater_de_5a33d8fbe4b0ff955ad22ad3&locale=de_DE&numposts=10&sdk=joey&skin=light&version=v2.5&width=570] angefordert von [http://www.huffingtonpost.de/entry/merkel-schulz-groko-theater_de_5a33d8fbe4b0ff955ad22ad3?x4&utm_hp_ref=de-homepage]. Bereinigte URL: [https://www.facebook.com/plugins/comments.php?api_key=137920063083844&channel_url=http%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FlY4eZXm_YWu.js%3Fversion%3D42%23cb%2520f666f981c50036%2526domain%2520www.huffingtonpost.de%2526origin%2520http%253A%252F%252Fwww.huffingtonpost.de%252Ff30f36b538e6e0e%2526relation%2520parent.parent&colorscheme=light&href=http%3A%2F%2Fwww.huffingtonpost.de%2Fentry%2Fmerkel-schulz-groko-theater_de_5a33d8fbe4b0ff955ad22ad3&locale=de_DE&numposts=10&sdk=joey&skin=light&version=v2.5&width=570].Thank you in Advance and have a nice X-Mas Time
