Re: [Wikitech-l] XSS warning for an image download

2015-10-25 Thread Marcin Cieslak
On 2015-10-25, Pine W wrote: > When I right-click on the image download link for > File:Commodore_Grace_M._Hopper,_USN_(covered).jpg the download I get is > only 269 bytes and it contains a 404 error in plaintext even though it's a > jpg file. > > When I click on the image

Re: [Wikitech-l] XSS warning for an image download

2015-10-25 Thread Andre Klapper
On Sat, 2015-10-24 at 20:57 -0700, Pine W wrote: > When I right-click on the image download link for > File:Commodore_Grace_M._Hopper,_USN_(covered).jpg the download I get > is > only 269 bytes and it contains a 404 error in plaintext even though > it's a > jpg file. > > When I click on the image

Re: [Wikitech-l] XSS warning for an image download

2015-10-25 Thread Brian Wolff
Well the answer is right there in what you posted. No script took the url for File:Commodore_Grace_M._Hopper,_USN_(covered).jpg and replaced the brackets with spaces. (%28 and %29 or '(' and ')' respectively. %20 means ) If you want to be able to look at images with brackets in their names, I

Re: [Wikitech-l] XSS warning for an image download

2015-10-25 Thread Brian Wolff
On 10/24/15, Pine W wrote: > When I right-click on the image download link for > File:Commodore_Grace_M._Hopper,_USN_(covered).jpg the download I get is > only 269 bytes and it contains a 404 error in plaintext even though it's a > jpg file. > > When I click on the image

Re: [Wikitech-l] XSS warning for an image download

2015-10-25 Thread Pine W
*Here is the 404:* "404 Not Found The resource could not be found. File not found: /v1/AUTH_mw/ wikipedia-commons-local-public.ad/a/ad/Commodore_Grace_M._Hopper,_USN_%20covered%20.jpg " *Below is the log from the browser console. It looks like Noscript thinks that going from

[Wikitech-l] XSS warning for an image download

2015-10-24 Thread Pine W
When I right-click on the image download link for File:Commodore_Grace_M._Hopper,_USN_(covered).jpg the download I get is only 269 bytes and it contains a 404 error in plaintext even though it's a jpg file. When I click on the image preview that's 480x600 pixels, I get an XSS warning from