InformAction Forums

Posted: **Wed Nov 02, 2011 12:21 pm**

Hi,

I'm trying to make a XSS exception for the ubernote.com UberClip weblet. (you mark some text and initiate the weblet to have a copy sent to your account at ubernote)

I thought this should work:

Code: Select all

^http://www.ubernote.com/webnote/webtools[:graph:]+$

But it fails when tested on some random page with "lots" of text.
Obviously the include all option works, but I would like something a bit stricter.

Code: Select all

^http://www.ubernote.com/webnote/webtools.*$

Is regular expression classes allowed in the XSS filter at all?

Posted: **Wed Nov 02, 2011 12:34 pm**

Guess the posix character classes ain't supported.
Replaced [:graph:] with [\x21-\x7E] and it seems to work as expected.

Best regards.
Uten

Posted: **Wed Nov 02, 2011 2:41 pm**

uten wrote:Guess the posix character classes ain't supported.

JS is doing the RegExp work so its rules apply: https://developer.mozilla.org/en/JavaSc ... Characters

InformAction Forums

Regular expression in XSS exceptions

Regular expression in XSS exceptions

Re: Regular expression in XSS exceptions

Re: Regular expression in XSS exceptions