InformAction Forums

While making a purchase at NewEgg.com, I had to change options to allow all or the page wouldn't complete.. Then, after allowing all NoScript still blocked my verification from visa since it was XSS.. How exactly do I prevent that from being blocked?, from now on, when I make an online purchase this will always happen, do to changes in online banking.. Can You not add a way that we can just allow it as a request in the options during the transmission. so it can be processed..

(There was another similar sounding post - reminded me of "verified by Visa" - but I'll be if I can find it now ...?)

(Similar, but still not what I was looking for, Script blocking on linked site.)

Finally, XSS POST to GET transform prevents 3-D Secure payments.

@Silvarea:
Could you show me the lines starting with "[NoScript XSS]" shown in Tools|Error Console when this happens?

I've found that when a site uses "verified with Visa" you can click on the NoScript icon and allow the pop-up, and then use the "back" function to reload the page. Firefox will tell you that you have to resend the data, but that's not a problem. However, as there is no title bar, you don't know if the pop-up window is using http or https which is rather worrying, as you are asked for date-of-birth, mother's maiden name and so on, which really should only go over a secure channel.

Seems a daft idea to me to be asking for such security details over t'Internet, but that's a different issue.