Page 1 of 1

noscript throwing up constant not a function (URL) errors

Posted: Tue Dec 10, 2019 10:51 pm
by jreyes1958
i continue to get on virtually any website i visit a XSS crosscript error and they all contain some variation of the following:
i think i started noticing this after upgradin to firefox 71.0 - using windows 7 64 bit firefox 74.0 -- just updated noscript login with same results



no matter which site i visit i get this array.foreach is not a function, (URL) - i block it over and over again, but keeps popping up -- so not sure if it's a firefox issue, a noscript issue, i have something in settings set wrong.


here are some examples from recent browsing

Code: Select all

NoScript detected a potential Cross-Site Scripting attack

from [...] to http://rs-stripe.popsci.com.

Suspicious data:

TypeError: Array.forEach is not a function,(URL) http://rs-stripe.popsci.com/stripe/redirect?cs_email=*********************&cs_stripeid=2467&cs_sendid=746841018&cs_offset=0&cs_esp=cheetahdigital

here is another

Code: Select all

NoScript detected a potential Cross-Site Scripting attack

from https://www.nj.com to https://cdns.us1.gigya.com.

Suspicious data:

TypeError: Array.forEach is not a function,(URL) https://cdns.us1.gigya.com/gs/sso.htm?APIKey=2_iWsMDu4Cet-wL4cnhYjt8QrF0601c5VNEiF5aUF5UZKgpbv2PLrlUuwZzp9wlxSH&ssoSegment=&version=latest&build=10507#m=getToken&d=https://www.nj.com&callbackID=gig_sso_cb1576016224448_0&sAPIKey=2_zRY6653lTf2HXRO7QpNF8g-SWUmQq2fLh8M3ohojfXhjwnQgUPPtAOpWDv047OUa&gig_loggerConfig={"logLevel":0,"clientMuteLevel":0,"logTheme":1}

Re: noscript throwing up constant not a function (URL) errors

Posted: Tue Dec 10, 2019 10:52 pm
by Guest
i even got one when using this forum when redirecting to recaptcha which i whitelisted

same kind of error.

Re: noscript throwing up constant not a function (URL) errors

Posted: Wed Dec 11, 2019 12:21 am
by barbaz
Maybe this is related -
https://developer.mozilla.org/en-US/docs/Mozilla/Firefox/Releases/71 wrote:The non-standard Array generic methods have been removed in Firefox 71 (bug 1222547). They were first introduced in Firefox 1.5 (JavaScript 1.6) and deprecated from Firefox 68 onwards. If your use case is to use array generics on array-like objects, you can convert your object to a proper array using Array.from() and then use standard array methods.

Re: noscript throwing up constant not a function (URL) errors

Posted: Wed Dec 11, 2019 6:27 am
by Giorgio Maone
Since NoScript's codebase has been updated long time ago not to contain any Array.forEach(), I strongly suspect some other extensions' interference here.
Could you try disabling all the other extensions of yours and check whether this problem persists?
Thanks.

Re: noscript throwing up constant not a function (URL) errors

Posted: Sun Dec 22, 2019 11:07 pm
by rezphotos
I'm getting overwhelmed by TypeError: Array.forEach is not a function,(URL) h errors. I disabled all extensions but the flood continues. Any ideas on how to fix this?

Re: noscript throwing up constant not a function (URL) errors

Posted: Mon Dec 23, 2019 7:35 pm
by blithe
Just ran into this on a machine I had not used for a couple weeks. It looks like my FF extensions have not been updating for a year or so for some reason (NoScript v10.2.1 instead of the expected 11.0.9). It just gives "No updates found".

Not sure anyone else is in the same boat, but sharing just in case. It'll be a while if I get a chance to take another look at it.

Re: noscript throwing up constant not a function (URL) errors

Posted: Tue Dec 24, 2019 12:36 am
by Guest
My version of NoScript was dated 2018...so I installed 11.0.9 and the problem seems to have gone away. Thanks for the pointer.