Page 1 of 1

XSS warning loop issue

Posted: Fri Dec 22, 2017 10:15 am
by Kerta
I am currently stuck with an XSS warning loop running both current NoScript and current Firefox whenever I visit several websites. Most consistently, tumblr user pages.
The message I am getting is:

NoScript detected a potential Cross-Site Scripting attack
from [tumblr user page] to [tumblr assets server]
Suspicious data:
window.name

No matter what options I choose, including "Allow all" results in the window popping up again and again until I give up and leave the page. The message is always exactly the same with the only variance being the user page depending on which page I am on at the time. Exact sites edited out due to triggering spam filter, but pretty much every user page causes it for me. Is there any way to fix this?

Re: XSS warning loop issue

Posted: Fri Dec 22, 2017 12:59 pm
by MakoSDV
I just ran into the same problem. I just had to completely disable XSS in NoScript and then restart my browser to get the warning to stop popping up.

Re: XSS warning loop issue

Posted: Sun Jan 07, 2018 10:14 pm
by iank
I'm having the same issue. The prompt won't go away until the browser restarts then it comes back when I visit an offending page, so it's not a solution. I just put it into a far away virtual desktop and ignore it, but I'd love for this to be fixed.

Re: XSS warning loop issue

Posted: Sun Jan 07, 2018 11:33 pm
by Giorgio Maone
Working on it, will be fixed in next release, thanks.