Problem signing into Dropbox
Problem signing into Dropbox
In the last couple of weeks I have started to have problems with signing into Dropbox. I have whitelisted the site but keep getting "Cross scripting attack" boxes popping up. I used to be able to just ignore those and carry on to sign into Dropbox but now I can't. I have restarted Firefox with addons disabled, one by one and found out that NoScript is the culprit but as I have whitelisted it, I don't know what to do next. When I press on the Sign In box on Dropbox it just hangs.
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0
Re: Problem signing into Dropbox
This is the text I get from the No Script XSS Warning box.
Code: Select all
NoScript detected a potential Cross-Site Scripting attack
from https://8166291.fls.doubleclick.net to https://adservice.google.com.
Suspicious data:
(URL) https://adservice.google.com/ddm/fls/i/src=8166291;type=dpbxs0;cat=dpbx_002;ord=182190671357;gtm=ghostery;auiddc=394008115.1550764691;_dc_1=1;~oref=https://marketing.dropbox.com/login?referrer=
Last edited by barbaz on Thu Feb 21, 2019 4:33 pm, edited 1 time in total.
Reason: wrap XSS message in code tags
Reason: wrap XSS message in code tags
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0
Re: Problem signing into Dropbox
Are you sure that XSS warning is the reason NoScript is preventing you logging in to Dropbox? It looks related to ad(s), which I would think shouldn't be involved in the sign-in process.
*Always* check the changelogs BEFORE updating that important software!
-
Re: Problem signing into Dropbox
I'm not positive - I'm not that good with stuff like this. However, when I disabled No Script in my Firefox browser, I was able to sign in OK.
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0
Re: Problem signing into Dropbox
Further to above, I saw Ghostery was mentioned in the XSS warning. I have Ghostery installed as well. I disabled it and got into Dropbox! I assume that Ghostery is someway at fault but don't know how. Any pointers you can give appreciated thanks.
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0
Re: Problem signing into Dropbox
Ghostery has a long history of conflicting with other extensions and causing weird issues. For blocking tracking I recommend uBlock Origin.
*Always* check the changelogs BEFORE updating that important software!
-
Re: Problem signing into Dropbox
I appreciate the reply thank you - I will give that a try.
BTW - interesting to note that I was just replying to this and No Script threw up an XSS warning for your site....
BTW - interesting to note that I was just replying to this and No Script threw up an XSS warning for your site....
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0
Re: Problem signing into Dropbox
I installed Umatrix and got the same XSS warning as before but this time the wording was different. Do you have a problem with UMatrix being installed at the same time as NoScript?
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0
Re: Problem signing into Dropbox
I uninstalled Umatrix, then tried Dropbox again and nothing. I temporarily disabled NoScript and got into Dropbox. I enabled it again and couldn't get in so has to be something to do with NoScript. I've whitelisted Dropbox, so would appreciate some advice please.
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0
Re: Problem signing into Dropbox
And what about dropboxstatic.com?I've whitelisted Dropbox
Or if you allow scripts globally?
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0 SeaMonkey/2.53 Lightning/5.8
Re: Problem signing into Dropbox
Not tried that but thank you.
Mozilla/5.0 (iPad; CPU OS 12_1_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Mobile/15E148 Safari/604.1
Re: Problem signing into Dropbox
I had actually got dropboxstatic whitelisted.
I'm now getting a message up which says :-
I'm now getting a message up which says :-
Code: Select all
[
NoScript detected a potential Cross-Site Scripting attack
from https://8166291.fls.doubleclick.net to https://adservice.google.com.
Suspicious data:
(URL) https://adservice.google.com/ddm/fls/i/src=8166291;type=dpbxs0;cat=dpbx_002;ord=7671603710857;gtm=2wg241;auiddc=910476993.1551033434;_dc_1=1;~oref=https://marketing.dropbox.com/login?referrer=]
Last edited by barbaz on Tue Feb 26, 2019 11:46 pm, edited 1 time in total.
Reason: wrap XSS message in code tags
Reason: wrap XSS message in code tags
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0
Re: Problem signing into Dropbox
Create a new Profile.
Install only NoScript.
Confirm that you can log in.
Then go back & figure out what is wrong in your original Profile.
If neither work, then figure out what on your system is blocking you.
Install only NoScript.
Confirm that you can log in.
Then go back & figure out what is wrong in your original Profile.
If neither work, then figure out what on your system is blocking you.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0 SeaMonkey/2.49.5
Re: Problem signing into Dropbox
Thanks for the reply, I have pm'd you..
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0
Re: Problem signing into Dropbox
Create a new Firefox profile.I don't have the knowledge to help myself. I was recommended by someone to use NoScript in conjunction with another couple of programmes in order to give me some peace of mind. I have no idea what I should be checking to try and rectify the problem.
Install NoScript.
Attempt to log in to dropbox.
Adjust (site) permissions, as needed.
Attempt to log in to dropbox, again - this time with the needed (site) permissions.
Confirm that you can.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 5.1; rv:52.0) Gecko/20100101 SeaMonkey/2.49.5