OpenSubtitles forum

What's this?

https://i.imgur.com/dSyFyO7.png
https://pt.wikipedia.org/wiki/Cross-site_scripting
https://en.wikipedia.org/wiki/Cross-site_scripting
https://www.acunetix.com/websitesecurit ... scripting/


NoScript detected a potential Cross-Site Scripting attack

from https://www.opensubtitles.org to https://www.facebook.com.

Suspicious data:

window.name,(POST) cd[Schema.org]=[{"type":"http://schema.org/Organization","proper ... :"Swallows and Amazons subtitles Portuguese ","image":"//static7.opensubtitles.org/gfx/thumbs/3/8/1/7/1227183.jpg","datePublished":"2017-11-22T14:15:25+01:00","keywords":"The adventure begins","description":"Four children (the Swallows) on holiday in the Lake District sail on their own to an island and start a war with rival children (the Amazons). In the meantime, a mysterious man on a houseboat accuses them of a crime they did not commit."},"subscopes":[{"type":"http://schema.org/AggregateRating","pro ... :"Philippa Lowthorpe"},"subscopes":[]},{"type":"http://schema.org/Person","properties": ... me":"Bobby McCulloch"},"subscopes":[]},{"type":"http://schema.org/Movie","properties":{ ... "subscopes":[]}]}]

very strange, there is no XSS on site. Maybe some error in addon?

It's what happen recently everytime i try to download or upload any subtitle.

I see some facebook there, so probably thats facebook problem

That's the problem with embedding other websites into your own.
Basically you allow third parties to edit your pages...

having facebook like is ok I think.

I definitely disagree