New Version of NoScript barfing on all links

[Bagatell]

@Bloomie

NoScript just updated to v2.9.0.5 and is now giving a cross-site scripting warning on all links in bitco.in.

OpenGL compositor Initialized Succesfully.
Version: 2.1 NVIDIA-10.8.14 310.42.15f01
Vendor: NVIDIA Corporation
Renderer: NVIDIA GeForce GT 650M OpenGL Engine
FBO Texture Target: TEXTURE_2D
"DevToolsUtils.dbg_assert is deprecated! Use DevToolsUtils.assert instead!
dbg_assert@resource://gre/modules/commonjs/toolkit/loader.js -> resource://devtools/shared/DevToolsUtils.js:449:13
ObjectActor@resource://gre/modules/commonjs/toolkit/loader.js -> resource://devtools/server/actors/object.js:57:1
WCA_objectGrip@resource://gre/modules/commonjs/toolkit/loader.js -> resource://devtools/server/actors/webconsole.js:454:17
createValueGrip@resource://gre/modules/commonjs/toolkit/loader.js -> resource://devtools/server/actors/object.js:1913:1
WCA_createValueGrip@resource://gre/modules/commonjs/toolkit/loader.js -> resource://devtools/server/actors/webconsole.js:413:12
WCA_prepareConsoleMessageForRemote/result.arguments<@resource://gre/modules/commonjs/toolkit/loader.js -> resource://devtools/server/actors/webconsole.js:1561:14
WCA_prepareConsoleMessageForRemote@resource://gre/modules/commonjs/toolkit/loader.js -> resource://devtools/server/actors/webconsole.js:1559:24
WCA_onGetCachedMessages/<@resource://gre/modules/commonjs/toolkit/loader.js -> resource://devtools/server/actors/webconsole.js:754:27
WCA_onGetCachedMessages@resource://gre/modules/commonjs/toolkit/loader.js -> resource://devtools/server/actors/webconsole.js:746:11
DSC_onPacket@resource://gre/modules/commonjs/toolkit/loader.js -> resource://devtools/server/main.js:1599:15
LocalDebuggerTransport.prototype.send/<@resource://gre/modules/commonjs/toolkit/loader.js -> resource://devtools/shared/transport/transport.js:569:11
makeInfallible/<@resource://gre/modules/commonjs/toolkit/loader.js -> resource://devtools/shared/DevToolsUtils.js:87:14
makeInfallible/<@resource://gre/modules/commonjs/toolkit/loader.js -> resource://devtools/shared/DevToolsUtils.js:87:14
" DevToolsUtils.js:452
XenForo.activate(%o) [object HTMLDocument] xenforo.js:221
XenForo.init() 93ms. jQuery 1.11.0/1.2.8-dev xenforo.js:209:227
Setup preview tooltip for threads/announcement-bitcoin-project-to-full-fork-to-flexible-blocksizes.933/preview xenforo.js:383:433
XenForo.activate(%o) [object Object] xenforo.js:221
Setup preview tooltip for threads/gold-collapsing-bitcoin-up.16/preview xenforo.js:383:433
XenForo.activate(%o) [object Object] xenforo.js:221
XenForo.activate(%o) [object HTMLDocument] xenforo.js:221
XenForo.init() 90ms. jQuery 1.11.0/1.2.8-dev xenforo.js:209:227
This site makes use of a SHA-1 Certificate; it's recommended you use certificates with signature algorithms that use hash functions stronger than SHA-1.[Learn More] platform.twitter.com
[NoScript InjectionChecker] JavaScript Injection in ///u/0/se/0/_/ 1/fastbutton?usegapi=1&count=true&size=medium&hl=en-US&origin=https://bitco.in&url=https://bitco.in/&gsrc=3p&ic=1&jsh=m;/_/scs/apps-static/_/js/k=oz.gapi.en.cjMoLRgMYKE.O/m=__features__/am=AQ/rt=j/d=1/rs=AGLTcCNxRj05vz9TL38pdYLTAzt1mmgBfw#_methods=onPlusOne,_ready,_close,_open,_resizeMe,_renderstart,oncircled,drefresh,erefresh,onload&id=I0_1458202337791&parent=https://bitco.in&pfname=&rpctoken=31525214
(function anonymous() {
_methods=onPlusOne,_ready,_close,_open,_resizeMe,_renderstart,oncircled,drefresh,erefresh,onload /* COMMENT_TERMINATOR */
DUMMY_EXPR
})
[NoScript XSS] Sanitized suspicious request. Original URL [https://apis.google.com/u/0/se/0/_/+1/fastbutton?usegapi=1&count=true&size=medium&hl=en-US&origin=https://bitco.in&url=https://bitco.in/&gsrc=3p&ic=1&jsh=m;/_/scs/apps-static/_/js/k=oz.gapi.en.cjMoLRgMYKE.O/m=__features__/am=AQ/rt=j/d=1/rs=AGLTcCNxRj05vz9TL38pdYLTAzt1mmgBfw#_methods=onPlusOne,_ready,_close,_open,_resizeMe,_renderstart,oncircled,drefresh,erefresh,onload&id=I0_1458202337791&parent=https://bitco.in&pfname=&rpctoken=31525214] requested from [https://bitco.in/forum/find-new/23412/posts]. Sanitized URL: [https://apis.google.com/#16485739789928722685].
about:blank : Unable to run script because scripts are blocked internally. <unknown>
OpenGL compositor Initialized Succesfully.
Version: 2.1 NVIDIA-10.8.14 310.42.15f01
Vendor: NVIDIA Corporation
Renderer: NVIDIA GeForce GT 650M OpenGL Engine
FBO Texture Target: TEXTURE_2D

 

[Bloomie]

Did you file a ticket with the author of NoScript?

 

[Bagatell]

Not yet. I'm only getting this on bitco.in though.