Demo: http://keku.mit.edu/noscript_test.php
Expected result:
Scripts enabled: the text "google - javascript enabled"
Scripts disabled: the text "testing. you shouldn't see a link."
Observed result:
Scripts enabled: the text "google - javascript enabled"
Scripts disabled: the text "testing. you shouldn't see a link.
google" (this is the <a> element that shouldn't be displayed)
Notice that if you select the whole page when scripts are disabled using NoScript and use "View selection source", you see two <a> elements, one being the original link and the other inserted before the closing </body> tag:
Code: Select all
<a style="visibility: visible; display: block;" href="http://google.com">google</a>
I've tried just disabling scripts on a Firefox profile with no addons and got the expected result so this must be a NoScript bug.