NoScript bug affecting page cursor

Ask for help about NoScript, no registration needed to post
obiwan

NoScript bug affecting page cursor

Post by obiwan »

Steps to Reproduce:

1. Run Firefox with NoScript enabled
2. Copy and paste the following into the URL bar and press Enter (may need to set noscript.allowURLBarJS to true):

Code: Select all

data:text/html,<body style="height:2000px;cursor:pointer"></body>
3. Move the mouse over the page. As expected, the cursor is a hand cursor (pointer)
4. Click on the NoScript toolbar button to open the menu, then click again to close the menu
5. Now move the mouse back over the page

Expected result:
The cursor is still a pointer

Actual result:
The cursor has changed to an arrow

According to DOM Inspector, this CSS is added to the page, which is causing the problem by forcing the body cursor to auto:

Code: Select all

body:not([id]) { cursor: auto !important } .__noscriptOpaqued__ { opacity: 1 !important; visibility: visible; filter: none !important } iframe.__noscriptOpaqued__ { display: block !important; } object.__noscriptOpaqued__, embed.__noscriptOpaqued__ { display: inline !important } .__noscriptJustOpaqued__ { opacity: 1 !important } .__noscriptScrolling__ { overflow: auto !important; min-width: 52px !important; min-height: 52px !important } .__noscriptNoScrolling__ { overflow: hidden !important } .__noscriptHidden__ { visibility: hidden !important } .__noscriptBlank__ { background-color: white !important; color: white !important; border-color: white !important; background-image: none !important }
The bug can also be triggered in other ways, for example by opening a new page in another tab and then switching back to the first tab.
Mozilla/5.0 (X11; Linux i686; rv:22.0) Gecko/20100101 Firefox/22.0
obiwan

Re: NoScript bug affecting page cursor

Post by obiwan »

Also, you might see the arrow cursor at step 3, in which case you can ignore steps 4 and 5 because you've hit the bug already...
Mozilla/5.0 (X11; Linux i686; rv:22.0) Gecko/20100101 Firefox/22.0
User avatar
Giorgio Maone
Site Admin
Posts: 9557
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: NoScript bug affecting page cursor

Post by Giorgio Maone »

It's part of the protection against cursorjacking, I'm not sure there's a easy fix. Do you think this is something users can live with?
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:21.0) Gecko/20100101 Firefox/21.0
User avatar
therube
Ambassador
Posts: 7991
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: NoScript bug affecting page cursor

Post by therube »

Why am I not able to see the "hand" when following STR 1+2+3, with NoScript installed?
(I do get the hand when NoScript is not installed.)
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 5.1; rv:22.0) Gecko/20100101 SeaMonkey/2.19a2
obiwan

Re: NoScript bug affecting page cursor

Post by obiwan »

therube wrote:Why am I not able to see the "hand" when following STR 1+2+3, with NoScript installed?
(I do get the hand when NoScript is not installed.)
It should be the hand, but NoScript forces it to be the arrow instead. In my experience that doesn't happen straight away though. If I run the STR as soon as I open the browser, I get the hand/pointer at step 3 and the arrow at step 5. But if I run the STR at any other time, I get the arrow at step 3.

To answer Giorgio: it seems (at least to me) a surprising thing for NoScript to be affecting, but I guess if it's required for a security feature then it has to be done...
Mozilla/5.0 (X11; Linux i686; rv:22.0) Gecko/20100101 Firefox/22.0
User avatar
therube
Ambassador
Posts: 7991
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: NoScript bug affecting page cursor

Post by therube »

> It should be the hand, but NoScript forces it to be the arrow instead.

Oh, OK then. I see the arrow instead of the hand.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:22.0) Gecko/20100101 SeaMonkey/2.19a2
Post Reply