Page 1 of 1

(Classic) Strange XSS error

Posted: Mon Jun 18, 2018 7:12 pm
by barbaz
Attempting to load https://mega.nz/#!U3wlDbZR!Wjo7SNnRPgF- ... KfEPbvtyYY spins briefly, then it just stops and nothing happens. This error appears in the Browser Console (Ctrl-Shift-J) -

Code: Select all

[NoScript XSS] xss.reason.[Exception... "Component returned failure code: 0x804b000a (NS_ERROR_MALFORMED_URI) [nsIIOService2.newURI]"  nsresult: "0x804b000a (NS_ERROR_MALFORMED_URI)"  location: "JS frame :: chrome://noscript/content/IOUtil.js?1cga4v92v4ifo2n5uj9 :: newURI :: line 174"  data: no] --- newURI@chrome://noscript/content/IOUtil.js?1cga4v92v4ifo2n5uj9:174:14
onHttpStart@chrome://noscript/content/RequestWatchdog.js?1cga4v92v4ifo2n5uj9:148:34
observe@chrome://noscript/content/MainParent.js?1cga4v92v4ifo2n5uj9:97:24
Disabling the XSS filter does not help. I have to completely disable NoScript to get that link to load.

Re: (Classic) Strange XSS error

Posted: Mon Jun 18, 2018 7:23 pm
by barbaz
It's a conflict with µMatrix. Disabling µMatrix gets it working too.

So is this a NoScript bug, a µMatrix bug, or both, or neither?

Re: (Classic) Strange XSS error

Posted: Mon Jun 18, 2018 7:24 pm
by barbaz
Workaround: µMatrix dashboard > More, set

Code: Select all

enforceEscapedFragment false

Re: (Classic) Strange XSS error

Posted: Mon Jun 18, 2018 7:27 pm
by therube
(Too quick for me.)

Image

Re: (Classic) Strange XSS error

Posted: Mon Jun 18, 2018 7:29 pm
by barbaz
Since Waterfox isn't officially supported by either addon, testing again with Firefox 56.0.2, new profile.

STR:

1) install µMatrix from https://addons.mozilla.org/addon/umatrix/; install NoScript Classic latest development build 5.1.8.7rc1

2) visit link in OP

Same broken result. Same workaround gets it working.

Re: (Classic) Strange XSS error

Posted: Mon Jun 18, 2018 7:37 pm
by barbaz