RootsChat.Com

General => Technical Help => Topic started by: Duodecem on Tuesday 13 December 11 13:47 GMT (UK)

Title: Cross site scripting problems on Freereg
Post by: Duodecem on Tuesday 13 December 11 13:47 GMT (UK)
I use Windows Vista and I'm having a problem with Freereg.
As you know, you get a list of possible names and need to click on the number to see the details. This works fine.
Then you need to back click in order to check details for the next possible entry in the list. At this point I get the message "Internet Explorer has modified this page to prevent cross site scripting" Instead of the list on the previous page there is a blank page with a tiny hash symbol.
Eventually after much back clicking I get back to the search page, but usually the place that I've laboriously selected from the huge list has gone and I have to start again.
The most annoying thing is that it doesn't happen every time it seems quite random.
Any suggestions please?
Title: Re: Cross site scripting problems on Freereg
Post by: japeflakes on Tuesday 13 December 11 13:54 GMT (UK)
It is not recommended to turn off the XSS Filter in IE8 and IE9. Doing so will leave you vulnerable to cross-site scripting attacks
Title: Re: Cross site scripting problems on Freereg
Post by: [Ray] on Tuesday 13 December 11 14:01 GMT (UK)
Hi

If someone does not come up with an answer for IE8/9, then you can do it using Firefox.
Tools/Options/Tabs
"Open new windows in a new tab instead"

You've then got the original page in the original tab.
As you said "Click on the number to view the details" and you can then do what you want in the new tab(s).

R
 
Title: Re: Cross site scripting problems on Freereg
Post by: corieltauvi on Tuesday 13 December 11 22:53 GMT (UK)
You could try using compatibility mode  :D. It seems quite good for a lot of sites that don't work.
In IE8/9 click on tools > compatibility view and see how you get on.

Torven
Title: Re: Cross site scripting problems on Freereg
Post by: Duodecem on Wednesday 14 December 11 07:23 GMT (UK)
Thank you all -but I'm sorry I don't understand what IE8/9 is or how I access it.
I did think of using Firefox or google Chrome but I have the site bookmarked on Google andChrome does not offer that facility.
Thanks again, Jan
Title: Re: Cross site scripting problems on Freereg
Post by: andycand on Wednesday 14 December 11 08:04 GMT (UK)
Hi

IE8/9 is Internet Explorer 8 or 9 and is the browser you are probably using. When you log onto the Internet is the icon an E with a circle round it like an orbit? If so that is Internet Explorer. I have Windows Vista and my browser is IE8 (Internet Explorer 8) I use Compatability View as Torvan suggested and I did a quick test of FreeReg and can go back and forth with no problem

Andy
Title: Re: Cross site scripting problems on Freereg
Post by: falcybe on Wednesday 14 December 11 22:00 GMT (UK)
Quote
you get a list of possible names and need to click on the number to see the details. This works fine. Then you need to back click in order to check details for the next possible entry
Furthur to what Ray wrote:
In Internet Explorer, if you hold down the Ctrl key when you click on a number, the page will open up in a new tab, which you close after you have looked at it and the original list is always on your screen.

cheers, falcybe
Title: Re: Cross site scripting problems on Freereg
Post by: wrjones on Wednesday 14 December 11 23:13 GMT (UK)
I'm using Windows 7 and IE9,I keep getting a message on the bottom of the page;"Internet Explorer has modified this page to prevent cross site scripting"

Regards
William Russell Jones.
Title: Re: Cross site scripting problems on Freereg
Post by: [Ray] on Thursday 15 December 11 06:45 GMT (UK)

"IE8/9 has a Cross-Site Scripting (XSS) Filter feature (default switched on) that can help prevent one website from adding potentially malicious script code to another website. It analyzes how websites interact, and when it recognizes a potential attack, it will automatically block script code from running. When this happens, you will see a message in the Notification bar letting you know that the webpage was modified to help protect your privacy and security."


Title: Re: Cross site scripting problems on Freereg
Post by: Duodecem on Thursday 15 December 11 07:32 GMT (UK)
Thanks everyone- I tried compatability view -which seemed to work ok, though given what Ray says i don't want to leave my computer or the site open to malicious attack. I then tried falcybe's suggestion -holding down the ctrl button when clicking on the number -brilliant! Not only do I not lose the original list but I can also select several possibles and compare them instead of clicking back and forth- great suggestion -thank you! :)
Title: Re: Cross site scripting problems on Freereg
Post by: carol8353 on Thursday 15 December 11 09:08 GMT (UK)
I have this morning just started getting the annoying beep and then the bar across the top of the page which says IE has modified this page to help prevent cross site scripting.

I use IE8 and am still on good ole XP  ::)

I tried the compatibilty view thing at the top of the page but it's still doing it.

So flipping annoying.

Carol
Title: Re: Cross site scripting problems on Freereg
Post by: [Ray] on Thursday 15 December 11 14:38 GMT (UK)
Carol

Try this (although I didn't read it cox I use Firefow9)

http://blogs.msdn.com/b/ie/archive/2008/07/02/ie8-security-part-iv-the-xss-filter.aspx

There may be your answer

R
Title: Re: Cross site scripting problems on Freereg
Post by: carol8353 on Thursday 15 December 11 15:02 GMT (UK)
Thanks Ray,but I don't understand a word of it  8)

It has also started doing it on FindMyPast pages too.

I have turned off the 'bleep when notifying me ',thingy on compatibilty view,but it still bleeping well bleeps  :D

Carol
Title: Re: Cross site scripting problems on Freereg
Post by: Isabel H on Thursday 15 December 11 23:48 GMT (UK)
I use XP and IE8 and am getting this warning about cross scripting when I view some, but not all, boards on Rootschat, including this one. 
Could it be a result of MS updates or is something dangerous lurking on these boards?
Title: Re: Cross site scripting problems on Freereg
Post by: [Ray] on Friday 16 December 11 07:06 GMT (UK)

"Something lurking on these boards" ?

Only me, waiting for unsuspecting RootsChatters !

 8)
Title: Re: Cross site scripting problems on Freereg
Post by: Isabel H on Friday 16 December 11 11:37 GMT (UK)
Ah, that's all right then!  :)
Title: Re: Cross site scripting problems on Freereg
Post by: carol8353 on Friday 16 December 11 12:25 GMT (UK)
Could it be a result of MS updates or is something dangerous lurking on these boards?

I didn't even think of that Isabel,but you've got me wondering now  :)
Title: Re: Cross site scripting problems on Freereg
Post by: andrewalston on Sunday 18 December 11 19:07 GMT (UK)
If you scan around when you've had the beep & message, you'll probably see that # symbol in the slot near the top of the page where banner ads appear.

There seems to be a horde of these things at present.

Personally I'd rather have the squawk than the awful flashing animations which would otherwise fill the space.