Office of
Procurement Services

Getting Started

Home » Training » Cross-site Scripting

Cross-site Scripting

• Alternatively you can skip these directions and use Mozilla's Firefox browser
• Note: EPIC is not compatible with the Safari browser.

Problem

Page-related security alert, “Internet Explorer has modified this page to help prevent cross-site scripting. Click for more information.”

Solution

Make the below URLs “Trusted Sites”, disable “XSS filter”, uncheck “Require Server Verification” for all Trusted Sites.

1. http://connect.hubspan.net
2. http://solutions.sciquest.com
3. https://b2b-test.apple.com
4. https://commerce.invitrogen.com
5. https://es-nd.ucs.indiana.edu
6. https://onestart.iu.edu
7. https://uisapp2.iu.edu

(Steps shown in provided images.)

Step A

Step B

Step C

The XSS filter should be disabled (as pictured).

Step D

Step E

Type each trusted site URL shown, clicking the Add button after each URL.

The box in step 11 should not be checked (as pictured).

List of Trusted Sites

1. http://connect.hubspan.net
2. http://solutions.sciquest.com
3. https://b2b-test.apple.com
4. https://commerce.invitrogen.com
5. https://es-nd.ucs.indiana.edu
6. https://onestart.iu.edu
7. https://uisapp2.iu.edu

Still Not Working? (Optional Step)

IE8 has a pop-up blocker under Tools -> Pop-up Blocker. Make sure that's off.