Bug Reports

Forum >> Bug Reports >> XSS attack warning.   Bookmark This Forum Thread

Post ID Date & Time Game Date Function
Yuri84
Joined: 10/14/2014
Posts: 639

Apple Valley Raccoons
III.2

Broken Bat Baseball
Almost sure it's a false positive but I a couple of hours ago my NoScript has started to complain about potential XSS attacks when I log in to BB.

Just mentioning it here in case something is actually wrong and is in need of checking.
admin
Joined: 01/27/2010
Posts: 4980

Administrator
Broken Bat Baseball
I'll look into it...

Steve
admin
Joined: 01/27/2010
Posts: 4980

Administrator
Broken Bat Baseball
When I install this checker, it flags scripts from brokenbat.org, google.com and gstatic.com (a google site). It allows facebook.com and google-analytics.com.

Not sure any of those are hostile re-directions.


Steve
Yuri84
Joined: 10/14/2014
Posts: 639

Apple Valley Raccoons
III.2

Broken Bat Baseball
Tried blocking different scripts and it looks like the google one was the cause. No idea why though.
Rock777
Joined: 09/21/2014
Posts: 9568

Haverhill Halflings
III.1

Broken Bat Baseball
I remember when Norton Antivirus flagged the Windows Operating System as a virus :) They patched it pretty quick. But we got a lot of millage out of that one :)


Previous Page | Show All |