XSS worm on my InfinityFree site?
InfinityFree Forum [Unofficial]
March 23, 2026
Here is the error message in the console:
> Unsafe attempt to load URL from frame with URL chrome-error://chromewebdata/. Domains, protocols and ports must match.
The culprit was a chrome extension called DuckDuckGo Search & Tracker Protection. When I disabled it the errors went away. I’m not even sure what that does besides set Duck Duck Go as my search engine, so I’m leaving it disabled.
Yes what I proposed earlier was a dirty solution. Before I found the actual culprit I set it up and it worked until I disabled my adblocker to see if that was the problem. The adblocker was apparently what was triggering the onload event when content failed to load, so without it it still failed, just without triggering an onload event which rendered my solution useless (without adding a timeout to it of course.)
Discussion in the ATmosphere