Support

Hello,

Just updated our websites to J3.4.7 and admintools 3.6.8 and while reviewing admintools waf configuration I have seen that the new functions due to joomla recent vulnerability were implemented but that the cross scripting block had desapeared.

Does that mean it is now included in another function or it is no longer provided ?

Thanks in advance for your answer.

Helene Kobel - App 'n' Web

Thanks for the information Nicholas.

I may be unlucky but I enabled it a few weeks ago on most of our websites because we had a case that seemed to be sort of cross scripting on one of our customer website.

If interesting for you I did not encounter any problem on J3.4.5 / j3.4.6 while enabled even on websites with lots of third-party extensions.

The problems I had with the cross scripting block one or two year ago was essentially fonts missing because of the duality between the www url and the non www one. I resolved them by redirecting non www to www and adding the www in the htaccess domain.

Never had any problem with this feature since then even on website on which I kept it enabled all the way until your last update :-)

Merry Christmas

Helene Kobel - App 'n' Web

Thanks for the advice. In the case we had, it seems it came from an old site stored by the customer in a subfolder so we just removed it.

As for your cross scripting block, I swear it's the truth, not a single issue using it on about twenty very different websites !

Anyway I am still a big fan of admintools and if you decided to remove this you're probably right. By the way thanks a lot for the new protections you implemented :-)