Hi Marc7, you could turn off the XSS protection feature of NoScript as a temporary workaround. Click its "S" toolbar button, then the button with the wrench, then the Advanced tab, then uncheck the box for "Sanitize cross-site suspicious requests".

If that doesn't help, do you use any other content blockers that might have settings you could tweak?

I'm trying to figure out if resetting Firefox would be a good idea. My problem is that one of my extensions is directly tied to my antivirus program, so my question is basically this; would the extension be able to be turned back on as is, or would I have to reinstall the antivirus program to get it back?

How did the extension get installed before? You might need to repeat that process because Firefox no longer installs extensions based solely on being listed in the Windows Registry.

Hi Marc7, you could turn off the XSS protection feature of NoScript as a temporary workaround. Click its "S" toolbar button, then the button with the wrench, then the Advanced tab, then uncheck the box for "Sanitize cross-site suspicious requests".

I could give that a try, but what I'd really love to be able to do is get at the actual settings of the noscript settings page. It's listed as 'privileged' and unable to have them changed. I wouldn't be surprised if half my issues are from being unable to get at the list of stuff that the section you mentioned is. Incidentally, would that mean my antivirus program would have to catch any attacks if they're legit, or what?

If that doesn't help, do you use any other content blockers that might have settings you could tweak?

So far as I know, noscript is the only thing I have that counts as such, unless you count adblock plus, but that's never given me any issues.

How did the extension get installed before? You might need to repeat that process because Firefox no longer installs extensions based solely on being listed in the Windows Registry.

I'm not really sure, to be honest. It seems to be something the antivirus installed. It seems to be something it makes available across multiple browsers. I have no idea how it does it, though. The Antivirus is called Webroot Secure Anywhere if that helps any?

Antivirus software doesn't protect against XSS (cross-site scripting) risks. XSS attacks generally involve scripts that send data from the site you are visiting to another site. Traditional AV usually focuses on files that download or execute on the PC. AV's that filter/proxy browsing usually wouldn't pick up these kinds of scripts, I don't think.

Antivirus software doesn't protect against XSS (cross-site scripting) risks. XSS attacks generally involve scripts that send data from the site you are visiting to another site. Traditional AV usually focuses on files that download or execute on the PC. AV's that filter/proxy browsing usually wouldn't pick up these kinds of scripts, I don't think.

Hmm. So then would it be more worthwhile to just do a clean uninstall and reinstall of Firefox then? I already have my bookmarks backed up, though I only have one of the older installers on hand. But I can easily upgrade straight back to the current version once I've got it installed. This way I would just need to contact my AV company and have them help me get the extension put back on.

I find it hard to recommend what to do because I don't know what problems you are encountering with your browsing (apart from lots of NoScript dialogs).

I find it hard to recommend what to do because I don't know what problems you are encountering with your browsing (apart from lots of NoScript dialogs).

Well, aside from the dialogs, some things just aren't working. For example, trying to get to some sections of paypal from sites I know work normally fine have just not been working properly. This has been most prevalent on Twitch in the last few days. I keep getting the XSS dialogues when I try to get to Paypal from there and the paypal windows won't open properly at all from there. I've seen the XSS dialogs pop up just from clicking on a video on Amazon Prime, for some reason, even if I'm just removing a show from my list because it's no longer available in the region. There's even the fact that I got an XSS dialogue from Amazon proper itself, which meant I had to find a new workaround in Noscript to get at the ability to use the 'look inside' section of books that have the option available. I'm not sure what if anything will happen the next time I try to buy something through Amazon at this point....

It's not just Twitch and Amazon and Amazon Prime Video where this happens, but those have been the most consistent places I've encountered this BS so far.

Have you tried completely turning off the NoScript XSS block to see how that affects the issue?

Have you tried completely turning off the NoScript XSS block to see how that affects the issue?

I didn't even know that was possible. How do I look into doing that?

Hi Marc7, you could turn off the XSS protection feature of NoScript as a temporary workaround. Click its "S" toolbar button, then the button with the wrench, then the Advanced tab, then uncheck the box for "Sanitize cross-site suspicious requests".

jscher2000 said

Hi Marc7, you could turn off the XSS protection feature of NoScript as a temporary workaround. Click its "S" toolbar button, then the button with the wrench, then the Advanced tab, then uncheck the box for "Sanitize cross-site suspicious requests".

Whoops. I thought you meant something else there. My bad. No, I haven't gotten around to trying that yet. Been a busy day between posts. ^^;;

Ok, so turning off the XSS might have worked, but I felt uncomfortable with the idea of leaving myself open to potential XSS attacks, so I just did a refresh. This may have fixed my issue there, as I was able to access Paypal on Twitch with no worries this time.

The only down side that I can see to the refresh, is that it appears to have meant I lost compact view on toolbar density. Can that be retrieved or no? I honestly am not sure if there was a difference between it and "normal" density, but I would still like the option back.

This article has the steps needed to add Compact density back to the selector: Compact mode workaround in Firefox.

This article has the steps needed to add Compact density back to the selector: Compact mode workaround in Firefox.

That worked perfectly! Thank you.

Incidentally, I have noticed since the refresh that when my mouse passes a video, it brings up something asking if I want to watch in picture in picture while browsing elsewhere. This is most prevalent in Youtube. Is there a way to turn that off? It gets annoying seeing that every time I need to pause the video or change the resolution.

Edit: Nevermind, I found it. Randomly right-clicking sometimes works, I guess. o.O Not that I know how to turn it back on if I wanted, but I'll deal with that another time. :)