NoScript needs exception in XSS. The evernote error message should say so!
With NoScript enabled, you need to put an XSS exception into NoScript for evernote to work.
You have to put
^https?://www\.evernote\.com/clip\.action$
in the XSS exceptions.
However, I find it difficult to come by this information. If you try the evernote bookmarklet in Firefox with a standard NoScript you'll get an error message, that evernote wasn't able to copy the contend of the page.
I can't even close the iFrame. All I'm offered is a link to go to the evernote site _within_ the iframe. And when not logged in, the log in fields aren't made to fit the small iframe.
Anyway...
What I wanted to say.
The error message "We couldn't copy the content from the webpage" should include a note that on has to add
^https?://www\.evernote\.com/clip\.action$
to the NoScript XSS exceptions.
I hope it's possible to find out, whether the user is using NoScript. And if it isn't, I think the NoScript rule should be displayed for all FF users that have the problem that the JS is stopped from copying the content of the webpage.
To get the information, what had to be done, I went to
http://forums.mozillazine.org/viewtop...
and read the question of someone else having the same problem.
You have to put
^https?://www\.evernote\.com/clip\.action$
in the XSS exceptions.
However, I find it difficult to come by this information. If you try the evernote bookmarklet in Firefox with a standard NoScript you'll get an error message, that evernote wasn't able to copy the contend of the page.
I can't even close the iFrame. All I'm offered is a link to go to the evernote site _within_ the iframe. And when not logged in, the log in fields aren't made to fit the small iframe.
Anyway...
What I wanted to say.
The error message "We couldn't copy the content from the webpage" should include a note that on has to add
^https?://www\.evernote\.com/clip\.action$
to the NoScript XSS exceptions.
I hope it's possible to find out, whether the user is using NoScript. And if it isn't, I think the NoScript rule should be displayed for all FF users that have the problem that the JS is stopped from copying the content of the webpage.
To get the information, what had to be done, I went to
http://forums.mozillazine.org/viewtop...
and read the question of someone else having the same problem.
1
person likes this idea
I like this idea!
Tell me when this idea gets some attention.
The more people who like this idea, the more it gets noticed.
The more people who like this idea, the more it gets noticed.
Create a customer community for your own organization
Plans starting at $19/month
-
Inappropriate?We are aware of the conflict with NoScript. I have filed a feature request to add the error message, if possible.
The company thinks
this is one of the best points
-
Inappropriate?What's the status since I guess it's related to my problem: whenever I 'Clip to Evernote' via IE, favorites, I get the message "IE has modified this page to help prevent cross-site scripting".
What should I do?
Thanks.
Jens
I’m confused
Loading Profile...



EMPLOYEE