Page 1 of 1

Broken URLs with braces (spaces instead of braces)

Posted: Fri Jun 03, 2011 10:28 am
by sustmi
Hello.

With enabled NoScript I have problems with some special URLs.

For example:

Code: Select all

http://localhost/application/search/newdomain.com(olddomain.com)
The actual sent request URI is:

Code: Select all

/application/search/newdomain.com%20olddomain.com%20
It looks like NoScript translates braces to spaces in some URLs.

However URL like this (note the space between "old" and "domain"):

Code: Select all

http://localhost/application/search/newdomain.com(old domain.com)
is sent well as:

Code: Select all

/application/search/newdomain.com(old%20domain.com)
I use current stable version and also tried development version (2.1.1).
I have default settings only with enabled setting "Completely allow all JavaScript (dangerous)", the last option in tab "General" (not sure about the actual English name, because I use Czech translation).

Note: With disabled NoScript or disabled option "Completely allow all JavaScript (dangerous)" URLs works well.

Re: Broken URLs with braces (spaces instead of braces)

Posted: Fri Jun 03, 2011 11:03 am
by Giorgio Maone
It's the XSS filter.
You can work around by adding the following line to your NoScript Options|Advanced|XSS exceptions box:

Code: Select all

^http://localhost/