InformAction Forums

I was just playing chess on facebook and I clicked "which friends are online"


I got a clickclear warning 'Potential click jacking - UI Redressing attempt' and I clicked the image and pressed ok.
Now the warning doesnt appear when i click "which friends are online". It opens a tab asking for facebook permissions.

How do i make the warning reappear?

When you get that, report it using the report button and then note the number and provide it here so we can take a look into it and see why. Otherwise, this doesn't provide anything helpful to diagnosing the issue. Or if you want to disable it altogether, do it inside NS options. Or if you just want to disable it on that page, uncheck the protection box for it and/or add it the ClearClick.exemptions and you won't see it again. But then again you won't be protected in any of the methods suggested either. So you might want to find out WHY you are getting it, rather than just making it go away.

You didnt get me. The warning appeared to me only for 1 time.
Now when i click the same area, the warning doesnt appear.

I want it to warn me again when I click "which friends are online" instead of opening a tab and asking for permissions

Oh I got you just fine. As for it happening once or occasionally, sometimes that is due simply to the way the page is painted and what elements are on the screen. Some AJAX or CSS alignments often tweaked or moved during the page rendering or even during/after ABP or other similar tools modifying the content, this will result in slight or not so slight shifts or pixels that result in an execution being triggered. This is why the report button is helpful as it allows us to look at the report and see WHAT caused it. Was it just a rendering issue or an actual malicious attempt. Do you get me now?

Oh, ya I get it.
Thanks.

Just to be sure, could you please open about:config, then in the Filter Bar type:
noscript.clearClick.exceptions
to see whether an exception has been added for that site?

If so, you can right-click that line, click Modify, then delete the site in question, and click OK. Do this when you're not at that page. Then close about:config, and see if you can reproduce the warning.

If so, please do as GµårÐïåñ asks, and send the report for analysis. If it is something in the site coding, sometimes Giorgio can work around that - or even better, let the site know that its design is setting off alarms in NoScript.

Also, please check NoScript Options > Embeddings, and ensure that
"ClearClick protection on pages... " is checked, in both "untrusted" and "trusted" sites.

It's better to have the protection and to fix the problem than to make exceptions that *might* come back to bite us one day.