Page 1 of 1

[Resolved] Use Blogger tool from Picasa w/o XSS msg

Posted: Tue Aug 09, 2011 7:48 pm
by RBEmerson
I'm trying to do something that should be fairly benign, click on the "Post on Blogger" link in Picasa, in an effort to use a picture from a Picasa web album in a blog on Blogger.com. NS 2.1.2.6rc7 throws up an XSS message on the console:
[NoScript XSS] Sanitized suspicious upload to [http://www.blogger.com/blog-this.g###DA ... %3C%2Fa%3E] from [https://picasaweb.google.com/1182829511 ... JKUsLXq9AE]: transformed into a download-only GET request.

How do I tell NS to let this and similar actions (between Picasa and Blogger) pass unaltered?

Re: Use Blogger tool from Picasa w/o XSS msg

Posted: Tue Aug 09, 2011 9:56 pm
by Giorgio Maone
Try adding the following line to your NoScript Options|Advanced|XSS exceptions box:

Code: Select all

^@https://picasaweb\.google\.com/

Re: Use Blogger tool from Picasa w/o XSS msg

Posted: Wed Aug 10, 2011 1:25 am
by RBEmerson
It works like a charm.

But, hey, you knew that. :D

Great thanks for your help!