Page 1 of 1

NoScript Error in Version 1.9.9.07

Posted: Sun Oct 11, 2009 11:36 am
by Guest
Hello,

recently I updated NoScript to Version 1.9.9.07 and I am getting the following error warning about a not responding script at "http://www.google.de/ig?hl=de" (iGoogle):
Ein Skript auf dieser Seite ist eventuell beschäftigt oder es antwortet nicht mehr. Sie können das Skript jetzt stoppen oder fortsetzen, um zu sehen, ob das Skript fertig wird.
Skript: chrome://noscript/content/RequestWatchdog.js:1082
And the error console says:
[NoScript DOS] Aborted potential DOS attempt: {GET http://1nltui3li1cdki8kde21baj1igs7ekjc ... UP7ETpw.js <<< http://www.google.de/ig?hl=de, http://www.google.de/ig?hl=de}
(function () {return this.filterXSS(abeReq);})

Can this be fixed please? :roll:

Re: NoScript Error in Version 1.9.9.07

Posted: Sun Oct 11, 2009 2:24 pm
by therube
See if the problem persists with the latest development build.

Still present in 1.9.9.11 Re: NoScript Error in Version 1.9.

Posted: Wed Oct 21, 2009 3:41 pm
by jim
[NoScript DOS] Aborted potential DOS attempt: {GET http://a.ads1.msn.com/ads/89384/0000089 ... clickTAG8= <<< http://www.msnbc.msn.com/, http://www.msnbc.msn.com/}
(function () {return this.filterXSS(abeReq);})

Re: NoScript Error in Version 1.9.9.07

Posted: Thu Oct 22, 2009 2:53 am
by Tom T.
I cannot reproduce this error, allowing one script at a time, even with every script and object allowed. I did several searches, using my limited German, and they worked well.

Can you tell us the exact steps to make this message appear? Which scripts and objects are allowed, and which are forbidden? What you clicked on or typed?

Notice that allowing one script often brings new scripts and objects into the menu, repeatedly.

In the meantime, a possible solution is not to allow the scripts and objects from msn or msnbc. See if this solves the issue.

I don't know the NoScript messages in German, but I'm assuming that DOS = Cross-Site Scripting, from "Durchstreichend Ort Skrip", or something close, since your error message includes "XSS", the common English abbreviation for Cross-Site Scripting ("X" = "Cross")

Are there any other red Error messages in the Error console?

I think NoScript developer Giorgio Maone will have to investigate this, but if you can provide this information, it will give him a much better start. Thank you.