[Fixed] Cosmetic error with new xssUserChoices UI
Posted: Mon Jan 25, 2021 7:26 pm
Firefox 85.0rc1
NoScript 11.2rc2
new profile
STR:
1) trigger a XSS prompt by entering the following in the url bar -
Select "Always block"
2) trigger a XSS prompt by entering the following in the url bar -
Select "Always block"
3) NoScript Options > Advanced, highlight only the https XSS user choice and click "Clear XSS choices"
Expected results:
The https XSS user choice should be cleared, the plain http XSS user choice should stay.
Actual results:
UI claims the plain http XSS user choice was cleared and that the https XSS user choice still exists. Reloading NoScript Options page shows that, however, it was in fact the https XSS user choice that got cleared, and the http XSS user choice is still there, as specified.
NoScript 11.2rc2
new profile
STR:
1) trigger a XSS prompt by entering the following in the url bar -
Code: Select all
http://noscript.net/<script>2) trigger a XSS prompt by entering the following in the url bar -
Code: Select all
https://noscript.net/<script>3) NoScript Options > Advanced, highlight only the https XSS user choice and click "Clear XSS choices"
Expected results:
The https XSS user choice should be cleared, the plain http XSS user choice should stay.
Actual results:
UI claims the plain http XSS user choice was cleared and that the https XSS user choice still exists. Reloading NoScript Options page shows that, however, it was in fact the https XSS user choice that got cleared, and the http XSS user choice is still there, as specified.