Page 1 of 1

Default XSS Exceptions List

Posted: Fri Apr 02, 2010 7:01 pm
by opello
In using NoScript on multiple computers, lately I have noticed that my Google Reader bookmarklet started to trigger XSS warnings. I resolved this by changing the google exception to have:

Code: Select all

^https?://
instead of:

Code: Select all

^http://
so it would work as transparently for SSL as it had for non-SSL google pages.

Thanks for such a great extension!

PS: In trying to post this I had to enable JavaScript temporarily for recaptcha.net. The degraded, frame version didn't seem to show up (didn't see a captcha at all with it disabled). Just seemed somewhat ironic. :)