Page 1 of 3
[RESOLVED] Zynga Poker and NoScript
Posted: Fri May 21, 2010 10:27 am
by TanOwer
Hi ever since yesterday I have not been able to play unless I disable NoScript altogether in firefox.
I have checked that both facebook and Zynga Poker have full access and no scripts are blocked. If I leave NoScript enabled all I get is the buddy bar loading at the top of the page. This happens even if I enable scripts globally:(
Thanks for and help in advance.
Tan
Re: Zynga Poker and NoScript
Posted: Fri May 21, 2010 5:07 pm
by therube
URL ?
Re: Zynga Poker and NoScript
Posted: Fri May 21, 2010 7:42 pm
by centaurius
The same thing happens to me also since 20t of May also!
Re: Zynga Poker and NoScript
Posted: Fri May 21, 2010 8:44 pm
by Peter
I have the very same problem, and it appeared on the very same day.
Re: Zynga Poker and NoScript
Posted: Sat May 22, 2010 9:32 am
by Giorgio Maone
Does the problem persist with
1.9.9.79?
Re: Zynga Poker and NoScript
Posted: Sat May 22, 2010 11:47 am
by centaurius
Giorgio Maone wrote:Does the problem persist with
1.9.9.79?
Yes... just tested it... i've uploaded a screenshot of the XSS warning:
http://i50.tinypic.com/syqg6b.jpg After that warning it just blocks practily evertything of that APP. I've tried to add to whitelist in XSS the
http://apps.facebook.com with no sucess.
Re: Zynga Poker and NoScript
Posted: Sat May 22, 2010 11:54 am
by Giorgio Maone
Can I see the [NoScript XSS] lines you should get in Tools|Error Console when it happens?
Re: Zynga Poker and NoScript
Posted: Sat May 22, 2010 2:02 pm
by centaurius
Giorgio Maone wrote:Can I see the [NoScript XSS] lines you should get in Tools|Error Console when it happens?
Well it gives this warning, and a bunch of unexpected lines, I only posted the NoScript XSS line:
Re: Zynga Poker and NoScript
Posted: Sat May 22, 2010 2:05 pm
by centaurius
Do you recommend any XSS expection code i could write?
^http://apps.facebook.com only doesn't work.
Re: Zynga Poker and NoScript
Posted: Sat May 22, 2010 2:58 pm
by Giorgio Maone
Remove the exception you put there, and replace it with
Code: Select all
^http://facebook\.poker\.zynga\.com/poker/
Re: Zynga Poker and NoScript
Posted: Sat May 22, 2010 3:17 pm
by centaurius
Giorgio Maone wrote:Remove the exception you put there, and replace it with
Code: Select all
^http://facebook\.poker\.zynga\.com/poker/
It worked, thanks
However this wasn't needed prior to 20th of May. Why is that?
Re: Zynga Poker and NoScript
Posted: Sat May 22, 2010 3:35 pm
by Giorgio Maone
centaurius wrote:However this wasn't needed prior to 20th of May. Why is that?
A change in Zynga code, most likely.
Notice that they're even nesting a full-featured JavaScript URL (
Code: Select all
inviteURL=javascript:ZY.openInvitePopup()
) in that requests, therefore NoScript has all rights to scream XSS danger.
Re: Zynga Poker and NoScript
Posted: Sun May 23, 2010 8:55 am
by TanOwer
Re: Zynga Poker and NoScript
Posted: Thu May 27, 2010 4:09 pm
by centaurius
Well the problem returned.... even ysng that code u said to add to excpetion.
This is what appears on error log:
What exception line should I (we) add now? :>
Re: Zynga Poker and NoScript
Posted: Thu May 27, 2010 4:38 pm
by Giorgio Maone
Hell, they seem to try hard at triggering XSS warnings (is their real aim making you disable the XSS filter outright)?
However, please change the above into:
Code: Select all
^http://facebook\w*\.poker\.zynga\.com/poker/
