Regular expression in XSS exceptions

[uten]

Hi,

I'm trying to make a XSS exception for the ubernote.com UberClip weblet. (you mark some text and initiate the weblet to have a copy sent to your account at ubernote)

I thought this should work:

Code: Select all

^http://www.ubernote.com/webnote/webtools[:graph:]+$

But it fails when tested on some random page with "lots" of text.
Obviously the include all option works, but I would like something a bit stricter.

Code: Select all

^http://www.ubernote.com/webnote/webtools.*$

Is regular expression classes allowed in the XSS filter at all?

[uten]

Guess the posix character classes ain't supported.
Replaced [:graph:] with [\x21-\x7E] and it seems to work as expected.

Best regards.
Uten

[dhouwn]

Guess the posix character classes ain't supported.

JS is doing the RegExp work so its rules apply: https://developer.mozilla.org/en/JavaSc ... Characters