10: Bookmarklets Don't Work unless Site is Allowed

Bug reports and enhancement requests
Post Reply
User avatar
therube
Ambassador
Posts: 7462
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

10: Bookmarklets Don't Work unless Site is Allowed

Post by therube » Tue Nov 28, 2017 6:30 am

Bookmarklets Don't Work unless Site is Allowed

Code: Select all

javascript:alert("Hello, World!");
http://forums.mozillazine.org/viewtopic ... &t=3035967


(Who knows, maybe this lil' 'ol bug is involved, Bug 866522 Bookmarklets affected by CSP?)
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0 SeaMonkey/2.49.2

oldmoz
Posts: 4
Joined: Sat Nov 25, 2017 6:12 am

Re: 10: Bookmarklets Don't Work unless Site is Allowed

Post by oldmoz » Tue Nov 28, 2017 8:26 am

Confirmed in a few linux systems.
It looks like mozco's dropped the ball on this.....again.

The W3 working draft spec on CSP wrt extensions is clear:]Leave them the heck alone. Extensions are for giving the user control over a page. CSP is part of defence in depth, not the monolithic firewall it's being wielded as by mozco.

The noise in bugzilla over CSP and extensions will overwhelm the project - if it hasn't already.
Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0

User avatar
therube
Ambassador
Posts: 7462
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: 10: Bookmarklets Don't Work unless Site is Allowed

Post by therube » Tue Jan 09, 2018 1:37 am

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0 SeaMonkey/2.49.2

User avatar
therube
Ambassador
Posts: 7462
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: 10: Bookmarklets Don't Work unless Site is Allowed

Post by therube » Thu Jul 26, 2018 6:09 pm

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 5.1; rv:52.0) Gecko/20100101 SeaMonkey/2.49.4

User avatar
Giorgio Maone
Site Admin
Posts: 8737
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: 10: Bookmarklets Don't Work unless Site is Allowed

Post by Giorgio Maone » Thu Jul 26, 2018 10:18 pm

Partially, arguably for the easiest part.
therube wrote: What is a "subresources" ?
Anything that gets loaded by the page, e.g. 3rd party scripts or frames.
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0

Post Reply