FireFox + NS + Google "Note in Reader" = XSS problem
Posted: Wed Aug 11, 2010 12:46 pm
Hi, please excuse my lack of experience with NoScript - I'm a casual user rather than a web hacker.
I'm having some trouble with one of my favourite browser features, a "Note in Reader" bookmarklet that takes the selected text and adds it to my Google Reader page. When I use it on some pages I get a NS XSS blocked warning, no information is saved and the browser history on that tab is lost.
My NoScript version is 2.0.1 and the bookmarklet reads as follows: -
I can fully understand that NS believes that something dodgy is afoot: there's a selection being passed to another site - fair enough!
I tried altering an existing Anti-XSS regex thus: -
No joy 
Google Reader and NoScript are both great features of my browsing experience -- How can I get the two great features to play nicely together?
I'm having some trouble with one of my favourite browser features, a "Note in Reader" bookmarklet that takes the selected text and adds it to my Google Reader page. When I use it on some pages I get a NS XSS blocked warning, no information is saved and the browser history on that tab is lost.
My NoScript version is 2.0.1 and the bookmarklet reads as follows: -
Code: Select all
javascript:var%20b=document.body;var%20GR________bookmarklet_domain='https://www.google.com';if(b&&!document.xmlVersion){void(z=document.createElement('script'));void(z.src='https://www.google.com/reader/ui/link-bookmarklet.js');void(b.appendChild(z));}else{}I tried altering an existing Anti-XSS regex thus: -
Code: Select all
^https?://([a-z]+)\.google\.(?:[a-z]{1,3}\.)?[a-z]+/(?:search|custom|reader\1)\?Google Reader and NoScript are both great features of my browsing experience -- How can I get the two great features to play nicely together?