JavaScript URL fails when NoScript is enabled

[therube]

JavaScript URL fails when NoScript is enabled in SeaMonkey.


Not all, but this one fails:

Code: Select all

javascript: var p=r(); function r(){var g=0;var x=false;var x=z(document.forms);g=g+1;var w=window.frames;for(var k=0;k<w.length;k++) {var x = ((x) || (z(w[k].document.forms)));g=g+1;}if (!x) alert('Password not found in ' + g + ' forms');}function z(f){var b=false;for(var i=0;i<f.length;i++) {var e=f[i].elements;for(var j=0;j<e.length;j++) {if (h(e[j])) {b=true}}}return b;}function h(ej){var s='';if (ej.type=='password'){s=ej.value;if (s!=''){prompt('Password found ', s)}else{alert('Password is blank')}return true;}}

While this one works:

Code: Select all

javascript: alert('hello world')

noscript.allowURLBarJS;true for the times NoScript is enabled.
Not seeing anything in Error Console.

?

[barbaz]

What is the failing bookmarklet supposed to do, and on what page are you trying it, and what is the script permission status of that page?
Are you typing/pasting it in the URL bar or invoking it as a bookmarklet?

(If I can reproduce maybe something would show up in the Web Console logs - sometimes with NoScript, bookmarklet errors end up there instead of somewhere the Error Console would get it. Sucks that SeaMonkey doesn't have the Browser Console. )

[therube]

It should popup an alert showing any passwords obscured by **** from a un/pw box.

URL is immaterial, you can try it on any page & if there is nothing to be found you still should get a popup dialog box.

I am typing/pasting it in the URL bar .

[therube]

Oops, I see FF is likewise affected.
(I didn't have NoScript installed in FF .)

[therube]

Looks to be related:

Error: Permission denied to access property 'document'

possibly, this?

"ReferenceError: r is not defined"

It might work sometimes?
Maybe after Allow Globally, but not just an Allow?
And then it might work even after a Forbid Globally, but then will not after (an actual) page refresh (or something along those lines)?


In order for the bookmarklet to work, the domain has to be Allowed.

[barbaz]

Code: Select all

[xx:43:25.985] ReferenceError: r is not defined @ chrome://noscript/content/JSURL.js:83

Likely a Gecko 35 issue and not a NoScript issue?
Let's see if moving things around gets it working...

[barbaz]

OK try this instead

Code: Select all

javascript: function r(){var g=0;var x=false;var x=z(document.forms);g=g+1;var w=window.frames;for(var k=0;k<w.length;k++) {var x = ((x) || (z(w[k].document.forms)));g=g+1;}if (!x) alert('Password not found in ' + g + ' forms');}function z(f){var b=false;for(var i=0;i<f.length;i++) {var e=f[i].elements;for(var j=0;j<e.length;j++) {if (h(e[j])) {b=true}}}return b;}function h(ej){var s='';if (ej.type=='password'){s=ej.value;if (s!=''){prompt('Password found ', s)}else{alert('Password is blank')}return true;}};r();void(0)