Trains.com

Subscriber & Member Login

Login, or register today to interact in our online community, comment on articles, receive our newsletter, manage your account online and more!

Filtered a Cross Site Scripting XSS attempt

700 views
2 replies
1 rating 2 rating 3 rating 4 rating 5 rating
  • Member since
    August 2006
  • From: Franconia, NH
  • 3,130 posts
Filtered a Cross Site Scripting XSS attempt
Posted by dstarr on Sunday, September 17, 2017 3:40 PM

I get this rather alarming error message only when I surf out to cs.trains.com (this website).  The message is coming from NoScript, a security add on to Firefox.   Does not sound good.  If it keeps up I may stop visiting  here.  Anyone else notice this?  Anyone else running NoScript?

  • Member since
    September 2003
  • From: California - moved to North Carolina 2018
  • 4,422 posts
Posted by DSchmitt on Sunday, September 17, 2017 3:51 PM

I use Chrome.  Got an error message late last night/very early this morning. It appeared to be caused by an error in coding on their site. 

Working allright now. 

I tried to sell my two cents worth, but no one would give me a plug nickel for it.

I don't have a leg to stand on.

  • Member since
    November 2006
  • From: Northeast
  • 746 posts
Posted by GraniteRailroader on Sunday, September 17, 2017 4:00 PM

It's benign and likely a false positive. Unless you're sharing your personal information (SS#, DOB, etc) via the community forum its a non issue. 

XSS warnings are frequently caused by advertiserment placement scripts since quite often the backend is off-site and managed by a management firm. Routing of the ad content and the specific scripts is pulled from their ad servers, and injected into the page. 

Its nothing to worry about. 

This space reserved for SpaceMouse's future presidential candidacy advertisements

Subscriber & Member Login

Login, or register today to interact in our online community, comment on articles, receive our newsletter, manage your account online and more!

Search the Community

ADVERTISEMENT
ADVERTISEMENT
ADVERTISEMENT
Model Railroader Newsletter See all
Sign up for our FREE e-newsletter and get model railroad news in your inbox!