InformAction Forums

Posted: **Fri May 14, 2021 10:11 pm**

Doing a DuckDuckGo search from the FF search bar for (content warning)

Doddy Gatz - Malicious Mackin' (Feat. BAKER) (Prod. Genshin)

... produces this XSS warning -

Code: Select all

NoScript detected a potential Cross-Site Scripting attack

from [...] to https://duckduckgo.com.

Suspicious data:

(URL) https://duckduckgo.com/?t=ffsb&q=Doddy+Gatz+-+Malicious+Mackin'+(Feat.+BAKER)+(Prod.+Genshin)&ia=web

But there's no XSS there.

Posted: **Fri May 28, 2021 2:24 pm**

Posted: **Fri May 28, 2021 2:32 pm**

It's the

Code: Select all

(Feat. BAKER) (Prod. Genshin)

following a potential string break

Code: Select all

Mackin'

looking like a suspicious syntactically valid JavaScript fragment.
Not sure what to do to lower sensitivity here, will think about it.

InformAction Forums

XSS filter false positive

XSS filter false positive

Re: XSS filter false positive

Re: XSS filter false positive