NoScript blocking credit card verifications

Ask for help about NoScript, no registration needed to post
Silvarea

NoScript blocking credit card verifications

Post by Silvarea »

While making a purchase at NewEgg.com, I had to change options to allow all or the page wouldn't complete.. Then, after allowing all NoScript still blocked my verification from visa since it was XSS.. How exactly do I prevent that from being blocked?, from now on, when I make an online purchase this will always happen, do to changes in online banking.. Can You not add a way that we can just allow it as a request in the options during the transmission. so it can be processed..
Mozilla/5.0 (Windows; U; Win 9x 4.90; en-US; rv:1.8.1.20) Gecko/20081217 Firefox/2.0.0.20
User avatar
therube
Ambassador
Posts: 7969
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: NoScript blocking credit card verifications

Post by therube »

(There was another similar sounding post - reminded me of "verified by Visa" - but I'll be if I can find it now ...?)

(Similar, but still not what I was looking for, Script blocking on linked site.)

Finally, XSS POST to GET transform prevents 3-D Secure payments.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.21) Gecko/20090403 Firefox/2.0 SeaMonkey/1.1.16
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: NoScript blocking credit card verifications

Post by Giorgio Maone »

@Silvarea:
Could you show me the lines starting with "[NoScript XSS]" shown in Tools|Error Console when this happens?
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.0.10) Gecko/2009042316 Firefox/3.0.10 (.NET CLR 3.5.30729)
danensis

Re: NoScript blocking credit card verifications

Post by danensis »

I've found that when a site uses "verified with Visa" you can click on the NoScript icon and allow the pop-up, and then use the "back" function to reload the page. Firefox will tell you that you have to resend the data, but that's not a problem. However, as there is no title bar, you don't know if the pop-up window is using http or https which is rather worrying, as you are asked for date-of-birth, mother's maiden name and so on, which really should only go over a secure channel.

Seems a daft idea to me to be asking for such security details over t'Internet, but that's a different issue.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.9.2) Gecko/20100115 Firefox/3.6
Post Reply