XSS Alert options going beyond screen.

Ask for help about NoScript, no registration needed to post
nagan
Senior Member
Posts: 340
Joined: Thu Mar 26, 2009 11:05 am

XSS Alert options going beyond screen.

Post by nagan »

Not able to see the alert options as it is extending beneath the visible area.Might be the screen res..Still........Image

It is thru a video file from netp**n.nl
Dreams are REAL possibilities. Pursue them with zest and you can make them HAPPEN!
You are GOD.Realize THAT!
Mozilla/5.0 (Windows NT 5.1; rv:5.0) Gecko/20100101 Firefox/5.0
nagan
Senior Member
Posts: 340
Joined: Thu Mar 26, 2009 11:05 am

Re: XSS Alert options going beyond screen.

Post by nagan »

Is this really a non-issue. Can someone clarify on the details...?
Dreams are REAL possibilities. Pursue them with zest and you can make them HAPPEN!
You are GOD.Realize THAT!
Mozilla/5.0 (Windows NT 5.1; rv:5.0) Gecko/20100101 Firefox/5.0
User avatar
therube
Ambassador
Posts: 7969
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: XSS Alert options going beyond screen.

Post by therube »

Other then the netp**n.nl domain, do you have any other domains on that site listed?
(All I needed to allow was netp**n.nl.)

Do you have Adblock Plus?
(I do.)

Between the two, NoScript & Adblock Plus, I was not able to generate any XSS warnings.

I don't recall ... In what order do things happen? You get the slidedown warning, then you clicked Options, then the (obscured) dialog pops up? Ah, & then because of its length, you are unable to see options to allow or not?

Going into Error Console affords no help, no? (Access to the message itself, yes.)

IMO, if this were not from a user generated action, like you clicked "play", then you should not allow whatever it is that wants to happen. (I.e., some ad or otherwise is what generated the XSS action.) And even clicking "play", I would not expect to see anything XSS related.


Notwithstanding, if the message length exceeds the alert window size, perhaps it should be displayed in a scrollable box, so that the actions buttons are not lost.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 5.1; rv:5.0) Gecko/20110706 Firefox/5.0 SeaMonkey/2.2
nagan
Senior Member
Posts: 340
Joined: Thu Mar 26, 2009 11:05 am

Re: XSS Alert options going beyond screen.

Post by nagan »

therube wrote:Other then the netp**n.nl domain, do you have any other domains on that site listed?
(All I needed to allow was netp**n.nl.)

Do you have Adblock Plus?
(I do.)

Between the two, NoScript & Adblock Plus, I was not able to generate any XSS warnings.

I don't recall ... In what order do things happen? You get the slidedown warning, then you clicked Options, then the (obscured) dialog pops up? Ah, & then because of its length, you are unable to see options to allow or not?

Notwithstanding, if the message length exceeds the alert window size, perhaps it should be displayed in a scrollable box, so that the actions buttons are not lost.
Yes I do have Adblock -Plus.
Might be it is not netp**n .Could be some other site.

The main issue is the lengthy warnings not having a scroll-bar.Ahem.
Dreams are REAL possibilities. Pursue them with zest and you can make them HAPPEN!
You are GOD.Realize THAT!
Mozilla/5.0 (Windows NT 5.1; rv:5.0) Gecko/20100101 Firefox/5.0
Post Reply