Create an account

Very important

  • To access the important data of the forums, you must be active in each forum and especially in the leaks and database leaks section, send data and after sending the data and activity, data and important content will be opened and visible for you.
  • You will only see chat messages from people who are at or below your level.
  • More than 500,000 database leaks and millions of account leaks are waiting for you, so access and view with more activity.
  • Many important data are inactive and inaccessible for you, so open them with activity. (This will be done automatically)


Thread Rating:
  • 807 Vote(s) - 3.5 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Cross site scripting invoked via document.write()

#1
Can anyone tell how to allow the cross site scripting in the jhipster so that the warning can be resolved?

> A Parser-blocking cross site (i.e. different jsapi:22 eTLD+1) script,
> [https://www.google.com/uds/?file=element...literation][2],
> is invoked via document.write. The network request for this script MAY
> be blocked by the browser in this or a future page load due to poor
> network connectivity. If blocked in this page load, it will be
> confirmed in a subsequent console message. See
> [

[To see links please register here]

][3] for more
> details

as well as multiple occurences of the same message referencing different Google scripts.

[2]: https://www.google.com/uds/?file=element...literation
[3]:

[To see links please register here]

Reply

#2
The warning you're receiving is due to you including the [Google Transliterate API](

[To see links please register here]

) in a manner which may result in poor user experience on devices with slow network connections.

Somewhere in the scripts for your site, you'll have a line which looks something like this:

document.write('<script src="https://www.google.com/uds/?file=elements&v=1&packages=transliteration"></script>');

There may be multiple scripts in one `document.write` or they may be split across several calls. This may not be the only thing in the call to `document.write`.

To remove this warning, you'll need to move all of your `<script>` tags outside of calls to `document.write`.

See [this post](

[To see links please register here]

) for more details.
Reply



Forum Jump:


Users browsing this thread:
1 Guest(s)

©0Day  2016 - 2023 | All Rights Reserved.  Made with    for the community. Connected through