I'm trying to do something that should be fairly benign, click on the "Post on Blogger" link in Picasa, in an effort to use a picture from a Picasa web album in a blog on Blogger.com. NS 2.1.2.6rc7 throws up an XSS message on the console:
[NoScript XSS] Sanitized suspicious upload to [http://www.blogger.com/blog-this.g###DA ... %3C%2Fa%3E] from [https://picasaweb.google.com/1182829511 ... JKUsLXq9AE]: transformed into a download-only GET request.
How do I tell NS to let this and similar actions (between Picasa and Blogger) pass unaltered?
[Resolved] Use Blogger tool from Picasa w/o XSS msg
[Resolved] Use Blogger tool from Picasa w/o XSS msg
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:5.0) Gecko/20100101 Firefox/5.0
- Giorgio Maone
- Site Admin
- Posts: 9524
- Joined: Wed Mar 18, 2009 11:22 pm
- Location: Palermo - Italy
- Contact:
Re: Use Blogger tool from Picasa w/o XSS msg
Try adding the following line to your NoScript Options|Advanced|XSS exceptions box:
Code: Select all
^@https://picasaweb\.google\.com/
Mozilla/5.0 (Windows NT 5.2; WOW64; rv:5.0) Gecko/20100101 Firefox/5.0
Re: Use Blogger tool from Picasa w/o XSS msg
It works like a charm.
But, hey, you knew that.
Great thanks for your help!
But, hey, you knew that.

Great thanks for your help!
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:5.0) Gecko/20100101 Firefox/5.0