(Untitled)

[world_wanderer]

I recently put Noscript into Firefox. It's wonderful, doing all sorts of wonderful things. I've noticed the first problem here though. A few minutes ago, I tried posting an embedded youtbue video in an LJ comment, and was getting an error. Seems Noscript was seeing something bad in the script you paste for embedding youtube videos, and blocking

Comments

[simbab]

I have never had issue here. Make sure that youtube.com and livejournal.com are trusted script executors. Additionally, YouTube has edge content distribution nodes under domains like ytimg.com. Go to YouTube and then look at NoScript to get a list of those and enable them.

The XSS dealie rarely trips for me, the only one I consistently get nailed on is the Cisco Networking Academy for school, but it always drops me at a site that doesn't go to cisco.com, just cisco.netacad.net and then I can log in. Also, there looks like there's a timing bug in it, because sometimes I'll get an XSS attempt error for livejournal.com when posting a comment but just try it again and it works.

Also, make sure the POST-GET transform thingie is checked. I think that solves a lot of the errors, as while comment pages work transparently for me, if I look in the history I'll see error pages that never popped up. I'm guessing Noscript is behind that.

[world_wanderer]

Where's the POST-GET in the options?

[simbab]

NoScript Options->Advanced->XSS