Omega Owners Forum

Please login or register.

Login with username, password and session length
Advanced search  

News:

Please play nicely.  No one wants to listen/read a keyboard warriors rants....

Pages: [1] 2  All   Go Down

Author Topic: Cross site scripting ?  (Read 1373 times)

0 Members and 1 Guest are viewing this topic.

Olympia5776

  • Omega Baron
  • *****
  • Offline Offline
  • Gender: Male
  • Ireland
  • Posts: 2138
    • View Profile
Cross site scripting ?
« on: 15 January 2013, 20:14:55 »

Was given a link to a site from owner of a similar car to mine re supplier of copies of underbonnet decals. He has purchased from them .
When I attempt to open the site it opens partially but a strip window at the top of the page states "Internet Explorer has modified this page to prevent cross site scripting "
No access can be got to any of the options on the site .
I've never seen this before , does anyone know what causes it and if there is a solution ?
Here is the site , I've not had any problems after attempting to open it but perhaps you should consider before opening.
http://www.pukardesigns.com/
Logged

STMO123

  • Guest
Re: Cross site scripting ?
« Reply #1 on: 15 January 2013, 21:01:54 »

No probs for me, here's
a screenshot:
Logged

PhilRich

  • Omega Queen
  • *****
  • Offline Offline
  • Gender: Male
  • A bit further North of the Back of Beyond!
  • Posts: 10338
    • Mk 2 Volvo V70
    • View Profile
Re: Cross site scripting ?
« Reply #2 on: 15 January 2013, 21:17:05 »

Works fine for me too ???
Did you forget to put a Shilling in the meter? ??? ;)
Logged
If it ain't broke keep fixing it 'til it is!

dbug

  • Omega Queen
  • *****
  • Offline Offline
  • Gender: Male
  • Northants
  • Posts: 14279
  • Dont knock Linux!
    • Jaguar XJ 5.0V8 Portfolio
    • View Profile
    • Dbug IT Services
Re: Cross site scripting ?
« Reply #3 on: 15 January 2013, 21:23:39 »

Works fine for me using Firefox (& IE9)
Logged
1972 Ferrari Dino, 1967 Triumph TR4A, Mondeo 2.0TDCi Estate, Jaguar XJ 5.0V8 Portfolio

Vamps

  • Offline Offline
  • Gender: Male
  • Bishop Middleham, Co Durham.
  • Posts: 24708
  • Flying Tonight, so Be Prepared.
    • Mig 2.6CDX and 2.2 Honda
    • View Profile
Re: Cross site scripting ?
« Reply #4 on: 15 January 2013, 22:10:37 »

OK here too................. :y :y
Logged

b4ndit

  • Omega Knight
  • *****
  • Offline Offline
  • Gender: Male
  • chester
  • Posts: 1827
  • Retired
    • VW Phaeton
    • View Profile
Re: Cross site scripting ?
« Reply #5 on: 15 January 2013, 22:28:16 »

works fine for me to :y
Logged

symes

  • Omega Baron
  • *****
  • Offline Offline
  • Gender: Male
  • oxford
  • Posts: 3488
  • Madness is a state of i dont mind
    • R reg 940 volvo
    • View Profile
Re: Cross site scripting ?
« Reply #6 on: 15 January 2013, 22:29:54 »

Works for me too :y
Logged
1998 volvo 940 turbo 225bhp +1965 Rover 5000 v8+ 1962 ford consul 375 lowrider

Entwood

  • Omega Queen
  • *****
  • Offline Offline
  • Gender: Male
  • North Wiltshire
  • Posts: 19566
  • My Old 3.2 V6 Elite (LPG)
    • Audi A6 Allroad 3.0 DTI
    • View Profile
Re: Cross site scripting ?
« Reply #7 on: 15 January 2013, 22:30:07 »

Thought from the title this was something to do with Gixer and STMO ...  :)
Logged

jimbobmccoy

  • Intermediate Member
  • ***
  • Offline Offline
  • Gender: Male
  • outer london
  • Posts: 311
    • View Profile
Re: Cross site scripting ?
« Reply #8 on: 15 January 2013, 23:02:19 »

Should be a setting in the security settings for IE that allows, disallows, or prompts this.
Think it's near the area for java script settings off the top of my head.

I would assume the op has it set to disallow and everyone else has it to allow.

Can cause vulnerabilities if left allowed, as it can allow the injection of malicious scripts from one site, in to another site, that is otherwise 'safe'.
Logged

Olympia5776

  • Omega Baron
  • *****
  • Offline Offline
  • Gender: Male
  • Ireland
  • Posts: 2138
    • View Profile
Re: Cross site scripting ?
« Reply #9 on: 15 January 2013, 23:08:19 »

Should be a setting in the security settings for IE that allows, disallows, or prompts this.
Think it's near the area for java script settings off the top of my head.

I would assume the op has it set to disallow and everyone else has it to allow.

Can cause vulnerabilities if left allowed, as it can allow the injection of malicious scripts from one site, in to another site, that is otherwise 'safe'.
It is an IE thing..... >:(
I've Googled it and set and reset the settings in the Security /custom settings section of tools but the site will not open on any of our 4 PC's . Too late and too tired to be arsed ........I've never seen that in all my years on line .
Logged

TheBoy

  • Administrator
  • *****
  • Offline Offline
  • Gender: Male
  • Brackley, Northants
  • Posts: 106023
  • I Like Lockdown
    • Whatever Starts
    • View Profile
Re: Cross site scripting ?
« Reply #10 on: 16 January 2013, 18:08:21 »

Cross Site Scripting is a serious problem, and you should not modify browser settings to "get around it".

And your browser should protect your from it.
Logged
Grumpy old man

TheBoy

  • Administrator
  • *****
  • Offline Offline
  • Gender: Male
  • Brackley, Northants
  • Posts: 106023
  • I Like Lockdown
    • Whatever Starts
    • View Profile
Re: Cross site scripting ?
« Reply #11 on: 16 January 2013, 18:08:59 »

By serious problem, I mean its a common way for internet nasties to compromise you.
Logged
Grumpy old man

Olympia5776

  • Omega Baron
  • *****
  • Offline Offline
  • Gender: Male
  • Ireland
  • Posts: 2138
    • View Profile
Re: Cross site scripting ?
« Reply #12 on: 16 January 2013, 19:20:16 »

By serious problem, I mean its a common way for internet nasties to compromise you.

I appreciate that TB but there must be something amiss with the settings on my 4 x PC's as no one else seems to get the same problems , every person I have mentioned this to has no problem opening up that site .
I cannot understand wy all these PC's don't like that site and as I said I have never had that message pop up on any site I have ever opened..... :-\
Logged

TheBoy

  • Administrator
  • *****
  • Offline Offline
  • Gender: Male
  • Brackley, Northants
  • Posts: 106023
  • I Like Lockdown
    • Whatever Starts
    • View Profile
Re: Cross site scripting ?
« Reply #13 on: 16 January 2013, 19:26:29 »

By serious problem, I mean its a common way for internet nasties to compromise you.

I appreciate that TB but there must be something amiss with the settings on my 4 x PC's as no one else seems to get the same problems , every person I have mentioned this to has no problem opening up that site .
I cannot understand wy all these PC's don't like that site and as I said I have never had that message pop up on any site I have ever opened..... :-\
I get the same error on that site. Its normal to get an error on that site. Do NOT modify your settings to make that site work, unless you can personally guarantee the site is not compromised.

« Last Edit: 16 January 2013, 19:28:57 by TheBoy »
Logged
Grumpy old man

TheBoy

  • Administrator
  • *****
  • Offline Offline
  • Gender: Male
  • Brackley, Northants
  • Posts: 106023
  • I Like Lockdown
    • Whatever Starts
    • View Profile
Re: Cross site scripting ?
« Reply #14 on: 16 January 2013, 19:32:26 »

Should add, on this PC, I'm using IE8.

Can't test with FF, as mine is way too old to point at potentially duff sites, and can't be arsed to update. And I wouldn't run Chrome on any PC until Google start to take security seriously.


Quite simply, avoid that site. IE is doing its job properly, and protecting you from severely suspect activity.
Logged
Grumpy old man
Pages: [1] 2  All   Go Up
 

Page created in 0.042 seconds with 21 queries.