Page 1 of 1

Problem with XSS scripts

Posted: Sat Oct 24, 2009 7:50 am
by Burgerboy524
Ever since I upgraded NoScript to version 1.9.9.11, it started blocking XSS scripts from my igoogle webpage, saying "NoScript filtered a potential cross-site scripting (XSS) attempt from [http://ig.gmodules.com]. Technical details have been logged to the Console." And the console's last entry as:
Error: not well-formed
Source File:
Line: 1, Column: 48
Source Code:
<body xmlns="http://www.w3.org/1999/xhtml">&css=http ... ver-card</
I tried putting http://ig.gmodules into the exemption list in the options but the problem still happens. Can anyone help?

Re: Problem with XSS scripts

Posted: Sun Oct 25, 2009 4:58 pm
by therube
I don't think that is the particular error needed.

Look through here, Facebook Google Gadget & it may give you a clue as to the domain needed for the exception.

Re: Problem with XSS scripts

Posted: Sun Oct 25, 2009 5:10 pm
by Giorgio Maone
Next time it happens please check Tools|Error Console for Messages (the ones with the blue icon) starting with [NoScript XSS].