Meet the Other Phone. Flexible and made to last.

Meet the Other Phone.
Flexible and made to last.

Buy now

Please or to access all these features

Site stuff

Join our Innovation Panel to try new features early and help make Mumsnet better.

Any techs out there? Cross-site scripting (XSS) error?

2 replies

unlucky83 · 17/03/2016 10:16

I have a script blocker (No Script) - accessing MN today (but not yesterday straight after the changes) I am getting a message that it has 'filtered a potential cross-site scripting attempt (XSS) from http - not https //www.mumsnet.com '
Do you know why?
(I got a similar message last year just prior to hackergate....so slightly concerned)
Technical detail from console
^ [NoScript XSS] Sanitized suspicious request. Original URL [https://apis.google.com/se/0//+1/fastbutton?usegapi=1&size=tall&hl=en-GB&origin=http%3A%2F%2Fwww.mumsnet.com&url=http%3A%2F%2Fwww.mumsnet.com%2FTalk%2Fsite_stuff%3Fcall%3DNewConversationPage&gsrc=3p&ic=1&jsh=m%3B%2F%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_GB.MHd3G-fbb8o.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCOki58fIWapLpBU879SCevvCcgl1w#_methods=onPlusOne%2C_ready%2C_close%2C_open%2C_resizeMe%2C_renderstart%2Concircled%2Cdrefresh%2Cerefresh%2Conload&id=I0_1458208906708&parent=http%3A%2F%2Fwww.mumsnet.com&pfname=&rpctoken=96206930] requested from [http://www.mumsnet.com/Talk/site_stuff?call=NewConversationPage]. Sanitized URL: [https://apis.google.com/#7475982048981272546].

OP posts:
fredfredgeorgejnrsnr · 17/03/2016 10:55

That's just a google+ request, unless you use google+ (which I very much doubt, no-one does really) is well worth blocking, as it will simply stop google knowing which mumsnet pages you read.

It's not explicitly a security problem though.

unlucky83 · 17/03/2016 11:47

Thanks - I'll put up with the annoying strip across the top of the page then...
(Not a google plus user ...in fact a bit annoyed that I've just realised unless I actually sign out of my email google tracks my searches anyway...)
Odd that it has just appeared after the changes ?
(And honestly I can't remember exactly what the similar problems were around Hackergate but I wasn't particularly surprised as things had seemed a bit odd for a while...)

OP posts:
New posts on this thread. Refresh page
Swipe left for the next trending thread