NoScript Under Firefox ClickJacking Issue

Last post 06-03-2009, 8:52 PM by kazzlo. 3 replies.
Sort Posts: Previous Next
  •  05-18-2009, 9:19 AM 52269

    NoScript Under Firefox ClickJacking Issue

    With NoScript installed on Firefox, clicks of the Upload button on the Insert Image, Insert Media, etc. pop-ups results in a NoScript potential ClickJacking warning which prevents the user from being able to upload the desired item. Indeed, the only way for the user to proceed is to switch to a different browser, disable ClickJacking detection under NoScript, disable NoScript altogether, or to clear the "Keep this element locked" checkbox on the warning pop-up before dismissing the pop-up and re-clicking the Cute Editor Insert pop-up Upload button. See screenshot below from the latest demo page using the most recent versions of Firefox and NoScript..
     
     
  •  05-18-2009, 3:16 PM 52291 in reply to 52269

    Re: NoScript Under Firefox ClickJacking Issue

     
    I am not able to reproduce this issue using the following version:
     
    1. FireFox:
     
    Mozilla/5.0 (Windows; U; Windows NT 6.0; en-GB; rv:1.9.0.10) Gecko/2009042316 Firefox/3.0.10 (.NET CLR 3.5.30729)
     
    2. NoScript:
     

    V. 1.9.2.8

     
    Can you check the version you are using and get back to me?

    asp.net Chat http://cutesoft.net/ASP.NET+Chat/default.aspx
    Web Messenger: http://cutesoft.net/Web-Messenger/default.aspx
    asp.net wysiwyg editor: http://cutesoft.net/ASP.NET+WYSIWYG+Editor/default.aspx
    asp wysiwyg html editor: http://cutesoft.net/ASP
    asp.net Image Gallery: http://cutesoft.net/ASP.NET+Image+Gallery/default.aspx
    Live Support: http://cutesoft.net/live-support/default.aspx

  •  05-18-2009, 3:34 PM 52294 in reply to 52291

    Re: NoScript Under Firefox ClickJacking Issue

    Hi Adam,
     
    I'm using Firefox version:
     
         Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.10) Gecko/2009042316 Firefox/3.0.10 (.NET CLR 3.5.30729)
     
    and NoScript version:
     
         V 1.9.2.8
     
    so it looks like we're using the same versions.
     
    I've included a video showing what I see. Before I captured the video, I disabled all Firefox Add-ons except NoScript. I also made sure I had the latest versions of NoScript and Firefox. See video below. Strange that you can't reproduce it.
     
    I'm running Firefox on WinXP SP3 with all of the latest Windows updates.
     
    Noet that if I click on the red rectangle in the center of the NoScript pop-up, it displays the Upload button, i.e. NoScript is complaining about the Upload button relative to potential ClickJacking.
     
    Regards,
    Bill
     
     
     
     
  •  06-03-2009, 8:52 PM 52780 in reply to 52291

    Re: NoScript Under Firefox ClickJacking Issue

    Adam,
     
    Any update on this issue? Were you able to reproduce it with NoScript installed under Firefox?
     
    Thanks,
    Kazzlo
View as RSS news feed in XML