[tor-talk] NoScript on Torbrowser annoys with cross-site scripting msg providing no search result

Georg Koppen gk at torproject.org
Thu Nov 24 10:20:00 UTC 2016


tortalk at arcor.de:
> Hi Torusers,
> 
> there is a notice which appears from the 2nd search on at the Torbrowser, can be seen on top below URL within a yellow box:
> 
> "NoScript filtered a potential cross-site scripting XSS attempt from [[System+Principal]]. Technical details have been logged to the Console."
> 
> While search engines did provide no result for that msg to solve that problem, any suggestion is appreciated, thanks.
> 
> There is no entry on the Console (pressed F12 ">_ Console, Web Console"). Every search with any char(s) with any search engine produce that msg. Reinstall Torbrowser (Tor Browser for Windows Version 6.0.6 - Windows 10, 8, 7, Vista, and XP) doesn't help. 
> 
> The last things which were done before this are watching two YT documentary videos, one after the other.

This seems to be caused by the recent NoScript update. Giorgio is aware
of the issue and is working on it:
https://forums.informaction.com/viewtopic.php?f=7&t=22296

We are tracking it on
https://trac.torproject.org/projects/tor/ticket/20752. The ticket should
contain some workarounds for the time being.

Georg


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20161124/7f3a2a06/attachment.sig>


More information about the tor-talk mailing list