Site Links
Home
Features
Documentation
Pricing & Order
Members Area
Support Options
UBBDev.com
UBBWiki.com
Who's Online Now
2 registered members (Pak, Gizmo), 102 guests, and 222 spiders.
Key: Admin, Global Mod, Mod
Member Spotlight
JAISP
JAISP
Pennsylvania
Posts: 1,333
Joined: February 2007
Show All Member Profiles 
Top Posters(30 Days)
isaac 24
Gizmo 18
Ruben 13
Morgan 6
Slaz 2
driv 2
JAISP 1
Latest Photos
Test
Testing to drag photos
Comfortable Cats
Test
BSA photos
Previous Thread
Next Thread
Print Thread
blocked by xss auditor? #259512
02/27/17 10:25 AM
02/27/17 10:25 AM
Bad Frog  Offline
OP
old hand
Joined: May 2008
Posts: 749
Coast of Maine
this isn't new (for me) but I figured I might as well ask about it.

I noticed this in 7.5.8 as well as 7.6.0

when I edit a template, and hit the update button, I get an error page with the following

Code
This page isn’t working

Chrome detected unusual code on this page and blocked it to protect your personal information (for example, passwords, phone numbers, and credit cards).
Try visiting the site's homepage.
ERR_BLOCKED_BY_XSS_AUDITOR


but if I go check the template, the edits were updated and everything works.
it's been an annoyance, not a deal breaker, asI can still do what I need to do, but figured why not get it right...


"No matter where you go, there you are."
"If you can't do something smart, Do something right"
"There are three kinds of people in the world, those who can count, and those who can't"
Express Hosting
Express Hosting "We are the official hosting company of UBB.threads. Ask us about our free migration services to migrate your UBB.threads installation."
Re: blocked by xss auditor? [Re: Bad Frog] #259524
02/27/17 01:38 PM
02/27/17 01:38 PM
isaac  Online Splat
UBB.threads Developer
Joined: Apr 2004
Posts: 1,219
California
this is a new change directly within recent chrome releases. it has to do with working with http pages on non https protocols. its looking at the page content and predicting that because "password" and "username" variables were mentioned, the page "must be a login page."

http://money.cnn.com/2016/09/08/technology/google-chrome-flag-non-secure-sites/

is your page using open http? or are you connecting through https?


isaac @ id242.com // my forum @ CelicaHobby.com
a current developer of UBB.threads php forum software // 7.6.2 Released
Re: blocked by xss auditor? [Re: Bad Frog] #259544
02/27/17 03:27 PM
02/27/17 03:27 PM
Bad Frog  Offline
OP
old hand
Joined: May 2008
Posts: 749
Coast of Maine
https


"No matter where you go, there you are."
"If you can't do something smart, Do something right"
"There are three kinds of people in the world, those who can count, and those who can't"
Re: blocked by xss auditor? [Re: Bad Frog] #259547
02/27/17 03:49 PM
02/27/17 03:49 PM
isaac  Online Splat
UBB.threads Developer
Joined: Apr 2004
Posts: 1,219
California
Originally Posted by Bad Frog
https


...and what ciphers are you using? are they obsolete?
If you are using an SSLCipherSuite which allows Internet Explorer 8 to connect, according to Google and Mozilla, you are probably running an insecure cipher

https://github.com/client9/sslassert/wiki/IE-Supported-Cipher-Suites

https://cc.dcsec.uni-hannover.de/


isaac @ id242.com // my forum @ CelicaHobby.com
a current developer of UBB.threads php forum software // 7.6.2 Released
Re: blocked by xss auditor? [Re: Bad Frog] #259549
02/27/17 03:57 PM
02/27/17 03:57 PM
Bad Frog  Offline
OP
old hand
Joined: May 2008
Posts: 749
Coast of Maine
I'm using the couldflare free https cert, and my host set up a letsencrypt cert also.


"No matter where you go, there you are."
"If you can't do something smart, Do something right"
"There are three kinds of people in the world, those who can count, and those who can't"
Re: blocked by xss auditor? [Re: Bad Frog] #259551
02/27/17 04:02 PM
02/27/17 04:02 PM
Bad Frog  Offline
OP
old hand
Joined: May 2008
Posts: 749
Coast of Maine
this was happening before I switched to https


"No matter where you go, there you are."
"If you can't do something smart, Do something right"
"There are three kinds of people in the world, those who can count, and those who can't"
Re: blocked by xss auditor? [Re: Bad Frog] #259552
02/27/17 04:02 PM
02/27/17 04:02 PM
isaac  Online Splat
UBB.threads Developer
Joined: Apr 2004
Posts: 1,219
California
Originally Posted by Bad Frog
this was happening before I switched to https


chrome
https://bugs.chromium.org/p/chromium/issues/detail?id=654794


isaac @ id242.com // my forum @ CelicaHobby.com
a current developer of UBB.threads php forum software // 7.6.2 Released
Re: blocked by xss auditor? [Re: isaac] #259553
02/27/17 04:06 PM
02/27/17 04:06 PM
Bad Frog  Offline
OP
old hand
Joined: May 2008
Posts: 749
Coast of Maine
Originally Posted by id242
Originally Posted by Bad Frog
this was happening before I switched to https


chrome
https://bugs.chromium.org/p/chromium/issues/detail?id=654794


ok then.

seeing as the updates still take even with the error page, I'll just deal with it, or use FF when editing templates.

Thank you!


"No matter where you go, there you are."
"If you can't do something smart, Do something right"
"There are three kinds of people in the world, those who can count, and those who can't"

Shout Box
Today's Birthdays
No Birthdays
Recent Topics
PHP 7.2 compatibility
by Pak. 10/16/18 06:00 PM
UBB.threads 7.7.0 - Progress Reports
by isaac. 10/13/18 09:34 AM
Can't Reply to Global Announcements
by M4TT. 10/06/18 08:29 PM
Forum Trends
by peter gariepy. 10/05/18 02:29 PM
Support for PHP 7
by Astro_Mike. 10/05/18 10:17 AM
Forum Statistics
Forums36
Topics35,148
Posts191,506
Members12,107
Most Online978
Jun 24th, 2007
Random Image
Powered by UBB.threads™ PHP Forum Software 7.6.2