XSS warning for Mageia,org webpages.

[marchugo]

Today NoScript gave me the warning that de webpage start.mageia.org is a potential cross-site scripting attack:


NoScript XSS Warning

NoScript detected a potential Cross-Site Scripting attack

from file:///usr/share/indexhtml/index.html to http://start.mageia.org.

Suspicious data:

(URL) http://start.mageia.org/?p=vendor=Magei ... fault&l=en

My system: Mageia 8, 64 bit, Firefox 102.13.oesr, NoScript 11.4.25.

Marc.

[doktor5000]

Hi there, best place to report this would be bugzilla: https://wiki.mageia.org/en/How_to_report_a_bug_properly

[filip]

We use local html file to open our web page. That is benign. At least it's meant that way.

You can check

Code: Select all

cat /usr/share/indexhtml/index.html

and

Code: Select all

cat /usr/share/indexhtml/script.js

or open those files in your favorite GUI editor for yourself.