Excluding Javascript Elements

Pieter's Avatar

Pieter

30 Aug, 2012 11:05 AM

Hello!

Is it possible to exclude JS Elements like Google Adsense?
Some 'websites' include search-strings in their adsense as google_afs_query (Escaped & secure) but its giving me some false positives, how to exclude this?

  1. Support Staff 1 Posted by Tasos Laskos on 30 Aug, 2012 02:49 PM

    Tasos Laskos's Avatar

    Could you send me the false-positive? I'd be better to fix this for good (if possible atm) rather than use a workaround.

  2. 2 Posted by Pieter on 30 Aug, 2012 03:00 PM

    Pieter's Avatar

    data-ga-page-view-url="/LR/SEARCH/ZERO?c=0&q=1arachni_xss_in_script_tag_5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

  3. Support Staff 3 Posted by Tasos Laskos on 30 Aug, 2012 03:20 PM

    Tasos Laskos's Avatar

    If a given module is known to cause problems you can simply not load it.
    Use *,-xss_script_tag to load all modules except the one causing the issue.

    A more advanced solution will have to wait until DOM/JS support.

  4. Tasos Laskos closed this discussion on 30 Aug, 2012 03:20 PM.

Comments are currently closed for this discussion. You can start a new one.

Keyboard shortcuts

Generic

? Show this help
ESC Blurs the current field

Comment Form

r Focus the comment reply box
^ + ↩ Submit the comment

You can use Command ⌘ instead of Control ^ on Mac