InformAction Forums

noscript has started to alert me that a possible xss attempt from [chrome:] has been blocked each time i do a keyword search from the location bar. i have tried to whitelist "^chrome:" in the xss section of the prefs, which had absolutely no effect, even though the pattern test field indicates all chrome: urls are matched by the whitelist. anyone else seeing this? what am i doing wrong?

Could you show me the [NoScript XSS] lines you should get in Tools|Error Console when this happens?

P.S.: the correct way to whitelist an origin for XSS checks is premetting "@" to its scheme, like or Your exception was whitelisting chrome://* as a target.