Site Links
Home
Features
Documentation
Pricing & Order
Members Area
Support Options
UBBDev.com
UBBWiki.com
Who's Online Now
1 registered members (UBBSystems), 38 guests, and 217 spiders.
Key: Admin, Global Mod, Mod
Member Spotlight
Gizmo
Gizmo
Portland, OR; USA
Posts: 16,930
Joined: June 2006
Show All Member Profiles 
Top Posters(30 Days)
isaac 20
Gizmo 14
Ruben 11
Morgan 3
Abbott 2
BB 2
Latest Photos
Testing to drag photos
Comfortable Cats
Test
BSA photos
Chinese Buddhist temple.
Previous Thread
Next Thread
Print Thread
blocked by xss auditor? #259512
02/27/17 10:25 AM
02/27/17 10:25 AM
Joined: May 2008
Posts: 748
Coast of Maine
Bad Frog Offline OP

old hand
Bad Frog  Offline OP

old hand
Joined: May 2008
Posts: 748
Coast of Maine
this isn't new (for me) but I figured I might as well ask about it.

I noticed this in 7.5.8 as well as 7.6.0

when I edit a template, and hit the update button, I get an error page with the following

Code
This page isn’t working

Chrome detected unusual code on this page and blocked it to protect your personal information (for example, passwords, phone numbers, and credit cards).
Try visiting the site's homepage.
ERR_BLOCKED_BY_XSS_AUDITOR


but if I go check the template, the edits were updated and everything works.
it's been an annoyance, not a deal breaker, asI can still do what I need to do, but figured why not get it right...


"No matter where you go, there you are."
"If you can't do something smart, Do something right"
"There are three kinds of people in the world, those who can count, and those who can't"
Express Hosting
Express Hosting "We are the official hosting company of UBB.threads. Ask us about our free migration services to migrate your UBB.threads installation."
Re: blocked by xss auditor? [Re: Bad Frog] #259524
02/27/17 01:38 PM
02/27/17 01:38 PM
Joined: Apr 2004
Posts: 1,171
California
isaac Offline
UBB.threads Developer
isaac  Offline
UBB.threads Developer
Joined: Apr 2004
Posts: 1,171
California
this is a new change directly within recent chrome releases. it has to do with working with http pages on non https protocols. its looking at the page content and predicting that because "password" and "username" variables were mentioned, the page "must be a login page."

http://money.cnn.com/2016/09/08/technology/google-chrome-flag-non-secure-sites/

is your page using open http? or are you connecting through https?


isaac @ id242.com // forum @ CelicaHobby.com
a current developer of UBB.threads php forum software // 7.6.2 Changelog
Re: blocked by xss auditor? [Re: Bad Frog] #259544
02/27/17 03:27 PM
02/27/17 03:27 PM
Joined: May 2008
Posts: 748
Coast of Maine
Bad Frog Offline OP

old hand
Bad Frog  Offline OP

old hand
Joined: May 2008
Posts: 748
Coast of Maine
https


"No matter where you go, there you are."
"If you can't do something smart, Do something right"
"There are three kinds of people in the world, those who can count, and those who can't"
Re: blocked by xss auditor? [Re: Bad Frog] #259547
02/27/17 03:49 PM
02/27/17 03:49 PM
Joined: Apr 2004
Posts: 1,171
California
isaac Offline
UBB.threads Developer
isaac  Offline
UBB.threads Developer
Joined: Apr 2004
Posts: 1,171
California
Originally Posted by Bad Frog
https


...and what ciphers are you using? are they obsolete?
If you are using an SSLCipherSuite which allows Internet Explorer 8 to connect, according to Google and Mozilla, you are probably running an insecure cipher

https://github.com/client9/sslassert/wiki/IE-Supported-Cipher-Suites

https://cc.dcsec.uni-hannover.de/


isaac @ id242.com // forum @ CelicaHobby.com
a current developer of UBB.threads php forum software // 7.6.2 Changelog
Re: blocked by xss auditor? [Re: Bad Frog] #259549
02/27/17 03:57 PM
02/27/17 03:57 PM
Joined: May 2008
Posts: 748
Coast of Maine
Bad Frog Offline OP

old hand
Bad Frog  Offline OP

old hand
Joined: May 2008
Posts: 748
Coast of Maine
I'm using the couldflare free https cert, and my host set up a letsencrypt cert also.


"No matter where you go, there you are."
"If you can't do something smart, Do something right"
"There are three kinds of people in the world, those who can count, and those who can't"
Re: blocked by xss auditor? [Re: Bad Frog] #259551
02/27/17 04:02 PM
02/27/17 04:02 PM
Joined: May 2008
Posts: 748
Coast of Maine
Bad Frog Offline OP

old hand
Bad Frog  Offline OP

old hand
Joined: May 2008
Posts: 748
Coast of Maine
this was happening before I switched to https


"No matter where you go, there you are."
"If you can't do something smart, Do something right"
"There are three kinds of people in the world, those who can count, and those who can't"
Re: blocked by xss auditor? [Re: Bad Frog] #259552
02/27/17 04:02 PM
02/27/17 04:02 PM
Joined: Apr 2004
Posts: 1,171
California
isaac Offline
UBB.threads Developer
isaac  Offline
UBB.threads Developer
Joined: Apr 2004
Posts: 1,171
California
Originally Posted by Bad Frog
this was happening before I switched to https


chrome
https://bugs.chromium.org/p/chromium/issues/detail?id=654794


isaac @ id242.com // forum @ CelicaHobby.com
a current developer of UBB.threads php forum software // 7.6.2 Changelog
Re: blocked by xss auditor? [Re: isaac] #259553
02/27/17 04:06 PM
02/27/17 04:06 PM
Joined: May 2008
Posts: 748
Coast of Maine
Bad Frog Offline OP

old hand
Bad Frog  Offline OP

old hand
Joined: May 2008
Posts: 748
Coast of Maine
Originally Posted by id242
Originally Posted by Bad Frog
this was happening before I switched to https


chrome
https://bugs.chromium.org/p/chromium/issues/detail?id=654794


ok then.

seeing as the updates still take even with the error page, I'll just deal with it, or use FF when editing templates.

Thank you!


"No matter where you go, there you are."
"If you can't do something smart, Do something right"
"There are three kinds of people in the world, those who can count, and those who can't"

Shout Box
Today's Birthdays
No Birthdays
Recent Topics
New Image capabilities ver 7.6.1
by Abbott. 06/14/18 02:28 PM
Thread deleted?
by Lisanne. 06/05/18 11:13 AM
random 500 server errors on post
by Bad Frog. 05/31/18 09:34 AM
Upgraded from 7.6.0 to 7.6.1.1
by BB. 05/30/18 12:33 PM
[STOCK] UBB.threads Style Packs
by isaac. 05/30/18 03:30 AM
Forum Statistics
Forums36
Topics35,120
Posts191,322
Members12,085
Most Online978
Jun 24th, 2007
Random Image
Powered by UBB.threads™ PHP Forum Software 7.6.2
(Preview build 20180524)