Bugs and Suggestions

Richard Deeming8-Jan-16 1:48

Richard Deeming

8-Jan-16 1:48

Shouldn't this be in the Spam forum?

"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer

Pete O'Hanlon8-Jan-16 1:56

Pete O'Hanlon

8-Jan-16 1:56

Doh! Clicked the wrong link - meant to click the one next to it.

This space for rent

ZurdoDev8-Jan-16 8:56

ZurdoDev

8-Jan-16 8:56

Richard Deeming wrote:
Shouldn't this be in the Spam forum?

Give Pete a break. He's new around here. $Shucks | :-\$

There are only 10 types of people in the world, those who understand binary and those who don't.

Richard Deeming8-Jan-16 9:06

Richard Deeming

8-Jan-16 9:06

"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer

Ravi Kumhar8-Jan-16 2:02

Ravi Kumhar

8-Jan-16 2:02

i think you should have to reinstall system

Pete O'Hanlon8-Jan-16 2:04

Pete O'Hanlon

8-Jan-16 2:04

My system's far too corrupted.

This space for rent

Nish Nishant8-Jan-16 6:43

Nish Nishant

8-Jan-16 6:43

His responses were out of line. That said, when a non-native speaker posts a question here and one of the first responses is quite rude and tells him that his question makes no sense at all, it might potentially sound quite insulting when he translates it to his language (assuming minimal English language understanding).

I am not sure why foreigners come here at all, there are so many non-English forums out there that may be better suited. The advertising on this site is targeted at North American and European audiences too. So it's not as if losing foreign participants adversely affects the site.

Of course it would have been ideal if people knew how to respond without telling someone off. But I guess that's asking too much Smile | :)

Regards,
Nish

Website: www.voidnish.com
Blog: voidnish.wordpress.com

Pete O'Hanlon8-Jan-16 9:37

Pete O'Hanlon

8-Jan-16 9:37

I agree. I also tried to get him to clarify what he meant. It's a shame it went the way it did.

This space for rent

Youtube links

#realJSOP7-Jan-16 5:52

#realJSOP

7-Jan-16 5:52

Would it be possible to allow the Lounge to show/embed the preview for a youtube link (like farcebook and other web forums do)?

".45 ACP - because shooting twice is just silly" - JSOP, 2010
-
You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010
-
When you pry the gun from my cold dead hands, be careful - the barrel will be very hot. - JSOP, 2013

Chris Maunder7-Jan-16 6:04

Chris Maunder

7-Jan-16 6:04

Eventually yes.

I'm curious as to what you'd post.

cheers
Chris Maunder

#realJSOP7-Jan-16 7:27

#realJSOP

7-Jan-16 7:27

I wouldn't post any porn if that's what you mean... Smile | :)

I've already posted youtube links for my car stuff.

Chris Maunder7-Jan-16 8:44

Chris Maunder

7-Jan-16 8:44

That's the least of my fears.

cheers
Chris Maunder

OriginalGriff9-Jan-16 2:04

OriginalGriff

9-Jan-16 2:04

I'm even more curious about what MM might post. Unsure | :~

And I don't think anyone wants to see it... Laugh | :laugh:

Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...

Suspicious ads

Maciej Los6-Jan-16 20:12

Maciej Los

6-Jan-16 20:12

Hello guys!

I've noticed that NoScript (Mozilla addon) had caught the following attempt of XSS injection:

[NoScript InjectionChecker] JavaScript Injection in ///ddm/adi/N233401.1392339DEVELOPERMEDIA.CO/B9333835.127053310;dc_ver=21.55;dc_eid=40004000;sz=728x90;dc_rdid=;dc_adk=2036841227;ord=gfpxxf;click=<a href="https://adclick.g.doubleclick.net/aclk?sa=L&ai=BpCZXOw2OVoCAGoewY8H4iPgCtrK3sQgAAAAQASAAOABYxqXCkdUCYOnkyYXYGoIBF2NhLXB1Yi00MjcxODYyMzI1NzY4ODI5sgETd3d3LmNvZGVwcm9qZWN0LmNvbboBCWdmcF9pbWFnZcgBCdoBPmh0dHA6Ly93d3cuY29kZXByb2plY3QuY29tL3NjcmlwdC9BbnN3ZXJzL0xpc3QuYXNweD90YWI9YWN0aXZlmALYNsACAuACAOoCHi82ODM5L2xxbS5jb2RlcHJvamVjdC5zaXRlL3Jvc_gC8NEekAOMBpgDpAOoAwHgBAGQBgGgBhbYBwA&num=0&cid=5Gh7YPOHEIt67SvUHOEMyUNp&sig=AOD64_19IblwV8PuZ0QfPdaUh3bdUkMgrQ&client=ca-pub-4271862325768829&adurl=;dc_rfl=1,http://www.codeproject.com/script/Answers/List.aspx?tab=active">https://adclick.g.doubleclick.net/aclk?sa=L&ai=BpCZXOw2OVoCAGoewY8H4iPgCtrK3sQgAAAAQASAAOABYxqXCkdUCYOnkyYXYGoIBF2NhLXB1Yi00MjcxODYyMzI1NzY4ODI5sgETd3d3LmNvZGVwcm9qZWN0LmNvbboBCWdmcF9pbWFnZcgBCdoBPmh0dHA6Ly93d3cuY29kZXByb2plY3QuY29tL3NjcmlwdC9BbnN3ZXJzL0xpc3QuYXNweD90YWI9YWN0aXZlmALYNsACAuACAOoCHi82ODM5L2xxbS5jb2RlcHJvamVjdC5zaXRlL3Jvc_gC8NEekAOMBpgDpAOoAwHgBAGQBgGgBhbYBwA&num=0&cid=5Gh7YPOHEIt67SvUHOEMyUNp&sig=AOD64_19IblwV8PuZ0QfPdaUh3bdUkMgrQ&client=ca-pub-4271862325768829&adurl=;dc_rfl=1,http://www.codeproject.com/script/Answers/List.aspx?tab=active</a>$0;sttr=46?
(function anonymous() {
tab=active$0;sttr=46 /* COMMENT_TERMINATOR */
DUMMY_EXPR
})

Can you check it?

Chris Maunder7-Jan-16 6:09

Chris Maunder

7-Jan-16 6:09

Looks like a 3rd party ad tag. I don't see any XSS in there but I'll certainly check it out.

cheers
Chris Maunder

Maciej Los7-Jan-16 19:51

Maciej Los

7-Jan-16 19:51

Thank you, Chris.

I checked it twice on my 2 laptops and 1 desktop before i posted this message. All machines all regularly checked for viruses, trojans, etc.

I do believe that you did something, because XSS warnings have gone today. Note that i did nothing.

Thank you.

Cheers,
Maciej

It get back.
As to my observation, XSS warnings are not displayed till ads on top are being unloaded.

modified 8-Jan-16 2:30am.

Jochen Arndt7-Jan-16 20:54

Jochen Arndt

7-Jan-16 20:54

I had it yesterday morning too and also now again.

If it helps:
The ads shown when this occurres are about Softlayer with clickable link [EDIT: inserted line breaks]

https://adclick.g.doubleclick.net/pcs/click
?xai=AKAOjstY4fXEO4wJ5mlIjfuN_skjkxLFyqpFzI8a_InDaAhZBLHih-wvMgVElXhFEwfTWrMyMe23Q8y2xD6aoQHO2DBIfjrXk45ihdcoL1STGA
&sig=Cg0ArKJSzKxeBTfNyIZf
&urlfix=1
&adurl=http://www.softlayer.com/info/break-boundaries-compute
%3Futm_source%3Ddeveloper_media
%26utm_medium%3Dbanner
%26utm_content%3DBreak_Boundaries_White%7CTargeting%7C728x90%7CJPG
%26utm_campaign%3DEU_-_EU_-_English_-_Region_-_Media_Buy_-_Developer_Media_-_SL_Branding

[UPDATE]
This happens only on the QA list page. I just had the same ad on a single QA page, in the lounge, and here while posting this message without a NoScript message.

[UPDATE 2]
The clickable link on other pages where the NoScript message does not occurr is different. Example:

https://adclick.g.doubleclick.net/pcs/click
?xai=AKAOjstRD0PGvv1wmRpZNqwnXp_s-duTli__SPigzXfolLWTn_eFoae153yDWcCXRc0cOWeP69d0f-Vw-CbiWXKKU2Yd65HFxpGtKlrZ0o3v1A
&sig=Cg0ArKJSzD_ewl2D4Df8
&urlfix=1
&adurl=https://adclick.g.doubleclick.net/aclk
%3Fsa%3DL
%26ai%3DBEE_uY2yPVufTO46fboTbr9AItrK3sQgAAAAQASAAOABYxqXCkdUCYJWCgIC4B4IBF2NhLXB1Yi00MjcxODYyMzI1NzY4ODI5sgETd3d3LmNvZGVwcm9qZWN0LmNvbboBCWdmcF9pbWFnZcgBCdoBZmh0dHA6Ly93d3cuY29kZXByb2plY3QuY29tL1F1ZXN0aW9ucy8xMDcwMTU4L0hvdy13b3VsZC1JLWdvLWFib3V0LW1ha2luZy1hLXJlYWxpc3RpYy1Tbm9va2VyLWdhP2Fybj00M5gC2DbAAgLgAgDqAh4vNjgzOS9scW0uY29kZXByb2plY3Quc2l0ZS9yb3P4AoHSHpADjAaYA6QDqAMB4AQBkAYBoAYW2AcA
%26num%3D0
%26cid%3D5GiltA
%26sig%3DAOD64_2DNkVrGZTJ7XNL4DEBMIwi1h0M6w
%26client%3Dca-pub-4271862325768829
%26adurl%3Dhttp://www.softlayer.com/info/break-boundaries-compute
%253Futm_source%253Ddeveloper_media
%2526utm_medium%253Dbanner
%2526utm_content%253DBreak_Boundaries_White%257CTargeting%257C728x90%257CJPG
%2526utm_campaign%253DEU_-_EU_-_English_-_Region_-_Media_Buy_-_Developer_Media_-_SL_Branding

modified 8-Jan-16 3:33am.

Maciej Los7-Jan-16 21:05

Maciej Los

7-Jan-16 21:05

Thank you, Jochen.

It's very interesting, because it happens only on QA forum.

I looked up into NoScript event log and this is what i see now:

Using //@ to indicate sourceURL pragmas is deprecated. Use //# instead rs=AGLTcCMOOHjdJMiEtHjnzYTwiQsW8U1Mwg:1245:0
about:blank : Unable to run script because scripts are blocked internally. <nieznane>
[NoScript InjectionChecker] JavaScript Injection in ///ddm/adi/N233401.1392339DEVELOPERMEDIA.CO/B9333835.127053310;dc_ver=21.55;sz=728x90;dc_rdid=;dc_adk=2036841227;ord=iiek3h;click=<a href="https://adclick.g.doubleclick.net/aclk?sa=L&ai=BXdBq-GiPVujKG6LuyAOlzIyQB7ayt7EIAAAAEAEgADgAWMalwpHVAmDp5MmF2BqCARdjYS1wdWItNDI3MTg2MjMyNTc2ODgyObIBE3d3dy5jb2RlcHJvamVjdC5jb226AQlnZnBfaW1hZ2XIAQnaAT5odHRwOi8vd3d3LmNvZGVwcm9qZWN0LmNvbS9zY3JpcHQvQW5zd2Vycy9MaXN0LmFzcHg_dGFiPWFjdGl2ZZgC2DbAAgLgAgDqAh4vNjgzOS9scW0uY29kZXByb2plY3Quc2l0ZS9yb3P4AoHSHpADjAaYA6QDqAMB4AQBkAYBoAYW2AcA&num=0&cid=5Ghu-BSkg09H5pKF61d2Ztj-&sig=AOD64_3w9DAxpaqaE3_R2CWF5xHjTWGHRQ&client=ca-pub-4271862325768829&adurl=;dc_rfl=1,http://www.codeproject.com/script/Answers/List.aspx?tab=active">https://adclick.g.doubleclick.net/aclk?sa=L&ai=BXdBq-GiPVujKG6LuyAOlzIyQB7ayt7EIAAAAEAEgADgAWMalwpHVAmDp5MmF2BqCARdjYS1wdWItNDI3MTg2MjMyNTc2ODgyObIBE3d3dy5jb2RlcHJvamVjdC5jb226AQlnZnBfaW1hZ2XIAQnaAT5odHRwOi8vd3d3LmNvZGVwcm9qZWN0LmNvbS9zY3JpcHQvQW5zd2Vycy9MaXN0LmFzcHg_dGFiPWFjdGl2ZZgC2DbAAgLgAgDqAh4vNjgzOS9scW0uY29kZXByb2plY3Quc2l0ZS9yb3P4AoHSHpADjAaYA6QDqAMB4AQBkAYBoAYW2AcA&num=0&cid=5Ghu-BSkg09H5pKF61d2Ztj-&sig=AOD64_3w9DAxpaqaE3_R2CWF5xHjTWGHRQ&client=ca-pub-4271862325768829&adurl=;dc_rfl=1,http://www.codeproject.com/script/Answers/List.aspx?tab=active</a>$0;sttr=31?
(function anonymous() {
tab=active$0;sttr=31 /* COMMENT_TERMINATOR */
DUMMY_EXPR
})

and

TypeError: this._recipeManager is null

and

getPreventDefault() method is obsolete. Use defaultPrevented instead.

And one more observation. Till Reply (to the comment) widget isn't used, XSS warning are not displayed.