Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I use both the addon NoScript and the blogging platform Tumblr. In order to customise your blog's theme in Tumblr, it goes to [http://www.tumblr.com/customize] where it displays a live preview of the blog and any modifications made to the theme. Since NoScript prevents XSS, it sort of breaks the ability to modify one's theme in Tumblr, unless you click the "Unsafe Reload" function.

How can i set up a Anti-XSS Exception Protection in NoScript so that it safely disables XSS protection just for tumblr.com/customize? I've tried

^http://www.tumblr.com/(reblog|share|customize).*
 
but that doesn't seem to work.

share|improve this question

1 Answer 1

up vote 1 down vote accepted

This took me a while to figure out. The exception I ended up going with is:

^http://([a-z]*)\.tumblr\.com/(reblog|share|customize|theme).*

Might not be the safest solution but it's the only one I could find that actually worked.

share|improve this answer
    
It works! Thank you so much! :D –  zenstealth May 21 '11 at 21:03

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.