{
  "$type": "site.standard.document",
  "bskyPostRef": {
    "cid": "bafyreidy5sqies6gu6s6ep6rubgmrgvgjt5rxepjpfyaiuhmzv6j74ffjq",
    "uri": "at://did:plc:qfsyszxhq5agxsg2n5zo4lno/app.bsky.feed.post/3mhrkz5nqvfg2"
  },
  "path": "/t/xss-worm-on-my-infinityfree-site/118094#post_17",
  "publishedAt": "2026-03-23T20:13:43.000Z",
  "site": "https://forum.infinityfree.com",
  "textContent": "Here is the error message in the console:\n\n> Unsafe attempt to load URL from frame with URL chrome-error://chromewebdata/. Domains, protocols and ports must match.\n\nThe culprit was a chrome extension called DuckDuckGo Search & Tracker Protection. When I disabled it the errors went away. I’m not even sure what that does besides set Duck Duck Go as my search engine, so I’m leaving it disabled.\n\nYes what I proposed earlier was a dirty solution. Before I found the actual culprit I set it up and it worked until I disabled my adblocker to see if that was the problem. The adblocker was apparently what was triggering the onload event when content failed to load, so without it it still failed, just without triggering an onload event which rendered my solution useless (without adding a timeout to it of course.)",
  "title": "XSS worm on my InfinityFree site?"
}