Page 1 of 1
[INVALID] FRAMEs are not blocked?
Posted: Mon Oct 22, 2012 9:48 am
by andrea
Salve,
come da oggetto, la versione 2.5.8(ho provato anche con la 2.5.9rc2), non blocca i tag frame.
Per esempio:
Code: Select all
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>
<frameset id="headerFrame" rows="70,*" frameborder="NO" border="0" framespacing="0" resizeable="no" scrollbars="no">
<frame name="header" scrolling="NO" src="http://nome_dominio.tld" marginwidth="0" marginheight="0" NORESIZE>
<frame name="content" src="pagina.html" marginwidth="0" marginheight="0" NORESIZE>
</frameset>
</html>
i tag frame non vengono bloccati.
Re: [Bug - 2.5.8 e 2.5.9rc2] Non blocca i Frame
Posted: Mon Oct 22, 2012 11:10 am
by Thrawn
From Google Translate:
Hi,
as object, version 2.5.8 (I also tried with 2.5.9rc2), does not block the tag frame.
For example:
Code: Select all
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>
<frameset id="headerFrame" rows="70,*" frameborder="NO" border="0" framespacing="0" resizeable="no" scrollbars="no">
<frame name="header" scrolling="NO" src="http://nome_dominio.tld" marginwidth="0" marginheight="0" NORESIZE>
<frame name="content" src="pagina.html" marginwidth="0" marginheight="0" NORESIZE>
</frameset>
</html>
frame tags are not blocked.
Re: [Bug - 2.5.8 e 2.5.9rc2] FRAMEs are not blocked?
Posted: Mon Oct 22, 2012 3:04 pm
by Giorgio Maone
It works for me, tested on 16.0.1 and 19.0a1:
http://evil.hackademix.net/test/frame
As expected, the middle frame, being same domain, is loaded, while the upper and the lower, being cross-domain, are blocked according to your permissions (i.e. if either the parent or the subdocument are not whitelisted, or if you're in click-to-play mode).
Please double check you've got "Forbid FRAMEs" checked in
NoScript Options|Embeddings (notice there's a separate setting for FRAMEs and IFRAMEs).
Re: [Bug - 2.5.8 e 2.5.9rc2] FRAMEs are not blocked?
Posted: Mon Oct 22, 2012 4:04 pm
by andrea
Nella pagina
http://evil.hackademix.net/test/frame funizona correttamente.
Ho scoperto, che
non vengono bloccati, solo quando si verifica questa condizione:
-il
parent è bloccato(il dominio non è nella whitelist)
-il
subdocument non è bloccato(il dominio è nella whitelist)
Google Translate:
The page
http://evil.hackademix.net/test/frame funizona properly.
I found out, that are not blocked, only when this condition occurs:
-the
parent is blocked (the domain is not on the whitelist)
-the
subdocument is not blocked (the domain is whitelisted)
Re: [Bug - 2.5.8 e 2.5.9rc2] FRAMEs are not blocked?
Posted: Mon Oct 22, 2012 4:13 pm
by Guest
Scusate ho fatto confusione. Ricapitolando:
Vengono bloccati: il parent è bloccato e il subdocument non è bloccato
Non vengono bloccati: il parent e il subdocument sono bloccati
Re: [Bug - 2.5.8 e 2.5.9rc2] FRAMEs are not blocked?
Posted: Mon Oct 22, 2012 5:04 pm
by andrea
Come non detto(quelle condizioni non valgono), ho fatto due pagine:
-
http://statisticsweb.altervista.org/1.html -> Non Funziona (il frame non viene bloccato) ->
imageshack.us/a/img803/3095/1html.jpg
-
http://statisticsweb.altervista.org/2.html -> Funziona (il frame viene bloccato) ->
imageshack.us/a/img202/5285/2html.jpg
Re: [Bug - 2.5.8 e 2.5.9rc2] FRAMEs are not blocked?
Posted: Mon Oct 22, 2012 5:22 pm
by andrea
In pratica, fa il controllo solo sul dominio di secondo livello e non su terzo, quarto, ecc... livello.
Re: [Bug - 2.5.8 e 2.5.9rc2] FRAMEs are not blocked?
Posted: Mon Oct 22, 2012 8:20 pm
by Thrawn
Google Translate:
Post 1:
Sorry I messed up. In summary:
Are blocked: the parent is locked and not locked subdocument
Are not blocked: the parent and the subdocument is locked
Post 2:
Forget it (these conditions do not apply), I had two pages:
-
Http://statisticsweb.altervista.org/1.html -> not works (the frame is not locked) -> imageshack.us/a/img803/3095/1html.jpg
-
Http://statisticsweb.altervista.org/2.html -> works (the frame is locked) -> imageshack.us/a/img202/5285/2html.jpg
Post 3:
In practice, it is the only control on the second level domain and not on the third, fourth, etc. ... level.
Re: [Bug - 2.5.8 e 2.5.9rc2] FRAMEs are not blocked?
Posted: Mon Oct 22, 2012 8:34 pm
by Giorgio Maone
andrea wrote:In pratica, fa il controllo solo sul dominio di secondo livello e non su terzo, quarto, ecc... livello.
Please read this carefully.