Noscript fail on mailto javascript links ?

Ask for help about NoScript, no registration needed to post
akiteko

Noscript fail on mailto javascript links ?

Post by akiteko »

Hi,

Can someone confirm that I am not mad ?

http://www.lady-tsigane-boutique.com/hu ... cateur.htm

Check out this page, there a "Poser une question a propos de ce produit" link, when I click on it the mail thing spawns, firefox can interpret it as a valid mailto:, however it should not work because it's inside a Javascript statement. I have tried to copy/paste the code in a html file, I then tried to access it with firefox/noscript, when I click on the link nothing happens as expected with noscript.

Nothing's allowed, I revoked temporary permissions.

Why doesn't noscript blocks the link on the website ? Can you reproduce it or give me any hints ?
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.18) Gecko/20110614 Firefox/3.6.18
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: Noscript fail on mailto javascript links ?

Post by Giorgio Maone »

NoScript Options|Advanced|Untrusted|Attempt to fix Javascript links
Mozilla/5.0 (Windows NT 5.2; WOW64; rv:5.0) Gecko/20100101 Firefox/5.0
akiteko

Re: Noscript fail on mailto javascript links ?

Post by akiteko »

It did the trick, I suppose it's not harmful to leave it on, you know your stuff :).

But I'm curious about why did it get blocked anyway on localhost.
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.18) Gecko/20110614 Firefox/3.6.18
User avatar
therube
Ambassador
Posts: 7969
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: Noscript fail on mailto javascript links ?

Post by therube »

when I click on it the mail thing spawns, firefox can interpret it as a valid mailto:, however it should not work because it's inside a Javascript statement
NoScript Options|Advanced|Untrusted|Attempt to fix Javascript links
The latter is set, but the mailto: link does not respond in SeaMonkey?

Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20110706 Firefox/5.0 SeaMonkey/2.2
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20110706 Firefox/5.0 SeaMonkey/2.2
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: Noscript fail on mailto javascript links ?

Post by Giorgio Maone »

therube wrote:
when I click on it the mail thing spawns, firefox can interpret it as a valid mailto:, however it should not work because it's inside a Javascript statement
NoScript Options|Advanced|Untrusted|Attempt to fix Javascript links
The latter is set, but the mailto: link does not respond in SeaMonkey?

Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20110706 Firefox/5.0 SeaMonkey/2.2
Because there's no subject (it couldn't be decoded because the decoding routine is JavaScript as well, and cannot be emulated).
Mozilla/5.0 (Windows NT 5.2; WOW64; rv:5.0) Gecko/20100101 Firefox/5.0
User avatar
therube
Ambassador
Posts: 7969
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: Noscript fail on mailto javascript links ?

Post by therube »

But why is the response seen in FF5 different?
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20110706 Firefox/5.0 SeaMonkey/2.2
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: Noscript fail on mailto javascript links ?

Post by Giorgio Maone »

therube wrote:But why is the response seen in FF5 different?
Is SM your default mail client?
Mozilla/5.0 (Windows NT 5.2; WOW64; rv:5.0) Gecko/20100101 Firefox/5.0
User avatar
therube
Ambassador
Posts: 7969
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: Noscript fail on mailto javascript links ?

Post by therube »

I don't know that I have a default mail client?
(SeaMonkey Mail is not.)

Event setting network.protocol-handler.external.mailto;true, I still get no response?
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20110706 Firefox/5.0 SeaMonkey/2.2
User avatar
therube
Ambassador
Posts: 7969
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: Noscript fail on mailto javascript links ?

Post by therube »

If I allow www.lady-tsigane-boutique.com
& enable network.protocol-handler.external.mailto;true
then I get, "mailto: is not a registered protocol".

Otherwise the setting of NoScript Options|Advanced|Untrusted|Attempt to fix Javascript links appears to have no bearing?
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20110706 Firefox/5.0 SeaMonkey/2.2
Post Reply