My feed
Premium

Please
or
to access all these features

Site stuff

Any techs out there? Cross-site scripting (XSS) error?

2 replies

unlucky83 · 17/03/2016 10:16

I have a script blocker (No Script) - accessing MN today (but not yesterday straight after the changes) I am getting a message that it has 'filtered a potential cross-site scripting attempt (XSS) from http - not https //www.mumsnet.com '
Do you know why?
(I got a similar message last year just prior to hackergate....so slightly concerned)
Technical detail from console
^ [NoScript XSS] Sanitized suspicious request. Original URL [https://apis.google.com/se/0//+1/fastbutton?usegapi=1&size=tall&hl=en-GB&origin=http%3A%2F%2Fwww.mumsnet.com&url=http%3A%2F%2Fwww.mumsnet.com%2FTalk%2Fsite_stuff%3Fcall%3DNewConversationPage&gsrc=3p&ic=1&jsh=m%3B%2F%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_GB.MHd3G-fbb8o.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCOki58fIWapLpBU879SCevvCcgl1w#_methods=onPlusOne%2C_ready%2C_close%2C_open%2C_resizeMe%2C_renderstart%2Concircled%2Cdrefresh%2Cerefresh%2Conload&id=I0_1458208906708&parent=http%3A%2F%2Fwww.mumsnet.com&pfname=&rpctoken=96206930] requested from [http://www.mumsnet.com/Talk/site_stuff?call=NewConversationPage]. Sanitized URL: [https://apis.google.com/#7475982048981272546].

OP posts:
Report
fredfredgeorgejnrsnr · 17/03/2016 10:55

That's just a google+ request, unless you use google+ (which I very much doubt, no-one does really) is well worth blocking, as it will simply stop google knowing which mumsnet pages you read.

It's not explicitly a security problem though.

Report
unlucky83 · 17/03/2016 11:47

Thanks - I'll put up with the annoying strip across the top of the page then...
(Not a google plus user ...in fact a bit annoyed that I've just realised unless I actually sign out of my email google tracks my searches anyway...)
Odd that it has just appeared after the changes ?
(And honestly I can't remember exactly what the similar problems were around Hackergate but I wasn't particularly surprised as things had seemed a bit odd for a while...)

OP posts:
Report
Please create an account

To comment on this thread you need to create a Mumsnet account.