[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #16425 [Tor Browser]: Searching via Disconnect should show no XSS false positive warnings

#16425: Searching via Disconnect should show no XSS false positive warnings
-----------------------------+---------------------------
     Reporter:  gk           |      Owner:  tbb-team
         Type:  defect       |     Status:  new
     Priority:  normal       |  Milestone:
    Component:  Tor Browser  |    Version:
   Resolution:               |   Keywords:  tbb-usability
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+---------------------------

Comment (by reezer):

 A fix for this is to add a pattern like
 `^https://search.disconnect.me/[^";<>]+$` to NoScript (Advanced -> XSS).
 Maybe this could be in there by default?

 The reason the others are not affected is that they are already in there.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16425#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs