search

hackademix / noscript

The popular NoScript Security Suite browser extension.
https://noscript.net/
GNU General Public License v3.0
851 stars 90 forks source link

Frequent, sometimes constant XSS errors on Tor Browser #206

Open RanTrycl opened 3 years ago

RanTrycl commented 3 years ago

I've seen a few posts about this on reddit but not sure if the problem is mostly isolated.

Visiting the types of sites likely to be heavily dependent on advertising frequently triggers an avalanche of "suspected XSS attack" blue notification screens which often pop up so constantly as to render the original pages unviewable.

This is using Tor 10.5.2 and NS Version 11.2.10 on Ubuntu 20.1.

Is this a legacy problem and is there a solution?

Thanks so much for any thoughts.

KOLANICH commented 3 years ago

Visiting the types of sites likely to be heavily dependent on advertising frequently triggers an avalanche of "suspected XSS attack" blue notification screens which often pop up so constantly as to render the original pages unviewable.

You mustn't use Tor Browser on any level other than "Safest". It defeats the purpose of using it.

hackademix commented 3 years ago

@KOLANICH is right on this. However, if for some reason you really need a lower level not blocking those 3rd party requests (which for Firefox users are usually filtered out by ad blockers) the popup you can choose to block the (potential) XSS request permanently, so you're not bothered again by that one.