# Cross-Site-Scripting(XSS) attempt from OpenID stackechange?

Today I was trying to login into stackechange that I ecounter the following problem. My questions is, was someone trying to steal my session id? Do I have to worry about password of my email that was open in another tab? and the email and password that I used to login to my stackechange account.

NoScript is claiming that it blocked the attempt.

if there is nothing to worry about, why would NoScript block such attempt??

Here is the screen shot of the problem:

## migrated from security.stackexchange.comJun 6 '14 at 22:04

This question came from our site for information security professionals.

• NoScript’s XSS protection and ABE are terribad; ignore. – Ry- Jun 6 '14 at 20:33
• Rude. You're terrible. – Abe Miessler Jun 6 '14 at 21:53
• Migrating to meta, as this refers to the site itself. – Rory Alsop Jun 6 '14 at 22:04

This is what we call in security: False-positive., which is defined usually as a type of error that leads a protection application to conclude that a supposed attack or infection exists when in fact it doesn't.