Here are the details regarding how FF6+ treats javascript: and data: URIs:
https://bugzilla.mozilla.org/show_bug.cgi?id=656433
Search found 4 matches
- Sat Mar 28, 2015 1:05 pm
- Forum: NoScript Support
- Topic: data: URIs
- Replies: 9
- Views: 6486
- Wed Mar 25, 2015 3:21 pm
- Forum: NoScript Support
- Topic: data: URIs
- Replies: 9
- Views: 6486
Re: data: URIs
Because they can have effect on the page on which they're typed/pasted, and users who can't vet them for themseleves should therefore probably not be messing with it. It sounds like you are referring to the issue that was fixed in Firefox 6. Or what is the difference between the issue fixed in FF 6...
- Tue Mar 24, 2015 1:09 pm
- Forum: NoScript Support
- Topic: data: URIs
- Replies: 9
- Views: 6486
Re: data: URIs
Because they can have effect on the page on which they're typed/pasted, and users who can't vet them for themseleves should therefore probably not be messing with it. It sounds like you are referring to the issue that was fixed in Firefox 6. Or what is the difference between the issue fixed in FF 6...
- Sun Mar 22, 2015 4:17 pm
- Forum: NoScript Support
- Topic: data: URIs
- Replies: 9
- Views: 6486
data: URIs
javascript: and data: URIs typed or pasted in the address bar are disabled to prevent social engineering attacks. Developers can enable them for testing purposes by toggling the "noscript.allowURLBarJS" preference. (NoScript notification) 1) Could you please explain to me the danger in al...