Site Links
Home
Features
Documentation
Pricing & Order
Members Area
Support Options
UBBDev.com
UBBWiki.com
Who's Online Now
2 registered members (Gizmo, mmkk), 69 guests, and 416 spiders.
Key: Admin, Global Mod, Mod
Member Spotlight
Mark S
Mark S
Liverpool : England : UK
Posts: 4,704
Joined: July 2006
Show All Member Profiles 
Top Posters(30 Days)
Gizmo 16
FREAK 11
M4TT 11
Ruben 6
mmkk 5
isaac 4
Latest Photos
Chinese Buddhist temple.
My buddha beads.
Rendered Walls
Multi-Screen wallpaper
Stockholm Metro
Previous Thread
Next Thread
Print Thread
blocked by xss auditor? #259512
02/27/17 09:25 AM
02/27/17 09:25 AM
Joined: May 2008
Posts: 742
Coast of Maine
Bad Frog Offline OP
old hand
Bad Frog  Offline OP
old hand
Joined: May 2008
Posts: 742
Coast of Maine
this isn't new (for me) but I figured I might as well ask about it.

I noticed this in 7.5.8 as well as 7.6.0

when I edit a template, and hit the update button, I get an error page with the following

Code
This page isn’t working

Chrome detected unusual code on this page and blocked it to protect your personal information (for example, passwords, phone numbers, and credit cards).
Try visiting the site's homepage.
ERR_BLOCKED_BY_XSS_AUDITOR


but if I go check the template, the edits were updated and everything works.
it's been an annoyance, not a deal breaker, asI can still do what I need to do, but figured why not get it right...


"No matter where you go, there you are."
"If you can't do something smart, Do something right"
"There are three kinds of people in the world, those who can count, and those who can't"
Express Hosting
Express Hosting "We are the official hosting company of UBB.threads. Ask us about our free migration services to migrate your UBB.threads installation."
Re: blocked by xss auditor? [Re: Bad Frog] #259524
02/27/17 12:38 PM
02/27/17 12:38 PM
Joined: Apr 2004
Posts: 1,004
California
isaac Offline
UBB.threads Developer
isaac  Offline
UBB.threads Developer
Joined: Apr 2004
Posts: 1,004
California
this is a new change directly within recent chrome releases. it has to do with working with http pages on non https protocols. its looking at the page content and predicting that because "password" and "username" variables were mentioned, the page "must be a login page."

http://money.cnn.com/2016/09/08/technology/google-chrome-flag-non-secure-sites/

is your page using open http? or are you connecting through https?

Re: blocked by xss auditor? [Re: Bad Frog] #259544
02/27/17 02:27 PM
02/27/17 02:27 PM
Joined: May 2008
Posts: 742
Coast of Maine
Bad Frog Offline OP
old hand
Bad Frog  Offline OP
old hand
Joined: May 2008
Posts: 742
Coast of Maine
https


"No matter where you go, there you are."
"If you can't do something smart, Do something right"
"There are three kinds of people in the world, those who can count, and those who can't"
Re: blocked by xss auditor? [Re: Bad Frog] #259547
02/27/17 02:49 PM
02/27/17 02:49 PM
Joined: Apr 2004
Posts: 1,004
California
isaac Offline
UBB.threads Developer
isaac  Offline
UBB.threads Developer
Joined: Apr 2004
Posts: 1,004
California
Originally Posted by Bad Frog
https


...and what ciphers are you using? are they obsolete?
If you are using an SSLCipherSuite which allows Internet Explorer 8 to connect, according to Google and Mozilla, you are probably running an insecure cipher

https://github.com/client9/sslassert/wiki/IE-Supported-Cipher-Suites

https://cc.dcsec.uni-hannover.de/

Re: blocked by xss auditor? [Re: Bad Frog] #259549
02/27/17 02:57 PM
02/27/17 02:57 PM
Joined: May 2008
Posts: 742
Coast of Maine
Bad Frog Offline OP
old hand
Bad Frog  Offline OP
old hand
Joined: May 2008
Posts: 742
Coast of Maine
I'm using the couldflare free https cert, and my host set up a letsencrypt cert also.


"No matter where you go, there you are."
"If you can't do something smart, Do something right"
"There are three kinds of people in the world, those who can count, and those who can't"
Re: blocked by xss auditor? [Re: Bad Frog] #259551
02/27/17 03:02 PM
02/27/17 03:02 PM
Joined: May 2008
Posts: 742
Coast of Maine
Bad Frog Offline OP
old hand
Bad Frog  Offline OP
old hand
Joined: May 2008
Posts: 742
Coast of Maine
this was happening before I switched to https


"No matter where you go, there you are."
"If you can't do something smart, Do something right"
"There are three kinds of people in the world, those who can count, and those who can't"
Re: blocked by xss auditor? [Re: Bad Frog] #259552
02/27/17 03:02 PM
02/27/17 03:02 PM
Joined: Apr 2004
Posts: 1,004
California
isaac Offline
UBB.threads Developer
isaac  Offline
UBB.threads Developer
Joined: Apr 2004
Posts: 1,004
California
Originally Posted by Bad Frog
this was happening before I switched to https


chrome
https://bugs.chromium.org/p/chromium/issues/detail?id=654794

Re: blocked by xss auditor? [Re: isaac] #259553
02/27/17 03:06 PM
02/27/17 03:06 PM
Joined: May 2008
Posts: 742
Coast of Maine
Bad Frog Offline OP
old hand
Bad Frog  Offline OP
old hand
Joined: May 2008
Posts: 742
Coast of Maine
Originally Posted by id242
Originally Posted by Bad Frog
this was happening before I switched to https


chrome
https://bugs.chromium.org/p/chromium/issues/detail?id=654794


ok then.

seeing as the updates still take even with the error page, I'll just deal with it, or use FF when editing templates.

Thank you!


"No matter where you go, there you are."
"If you can't do something smart, Do something right"
"There are three kinds of people in the world, those who can count, and those who can't"

Shout Box
Today's Birthdays
No Birthdays
Recent Topics
Users Unable to Upload Avatar
by M4TT. 12/13/17 08:51 AM
Shout Box Sound Effect
by M4TT. 11/29/17 08:28 PM
Ad island
by TGCsanderson. 11/25/17 06:41 PM
Taking to long to connect to DB
by AstroCat. 11/24/17 12:34 PM
Forum Statistics
Forums36
Topics35,015
Posts190,535
Members12,045
Most Online978
Jun 24th, 2007
Random Image
Powered by UBB.threads™ PHP Forum Software 7.6.1
(Snapshot build 20171106)