Software

Ask something
Discussion Locked

Cross site scripting ?

0 helpful
4 replies

by tony hopkinson

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hmm on occasion when posting a response to a question. I'm getting block foe cross site scripting from an untrusted source.

This came up on NoScripts' console.
Warning: Error in parsing value for property 'CURSOR'. Declaration dropped.
Source File: http://by114fd.bay114.hotmail.msn.com/cgi-bin/dasp/EN/hotmail___1000000003.css
Line: 24

When the question owner has a notify on ?

4 replies

by tony hopkinson

a new version of Noscript got detected this morning, so may be it was their end. Have to see if it happens again.

by techexec2

.
I've seen this recently several times also, including from the TR site. It just started about a week ago. I'm not sure what it is. From initial review, it does not appear there is a legitimate attempt to do cross-site scripting.

by techexec2

.
As you noted in your update:

[b][i]"...This update is focused on usability and precision of the new Anti-XSS protection feature: it drastically reduces false positives (e.g. those reported by some MySpace and forum boards users), while giving you even more control on what happens inside your browser!
NoScript's Anti-XSS client-side protection is a novel and unparalleled yet concept, hence I'm very grateful for all your help (especially reports) that made it real..."[/i][/b] (1)

----------------------------------------

(1) Version 1.1.4.8 "XSS Sniper"
http://noscript.net/?ver=1.1.4.8&prev=1.1.4.7

This discussion is closed to new replies.