Page 1 of 1

[FIXED] javascript: Bookmarklets break JavaScript

Posted: Mon Feb 10, 2014 9:11 pm
by vsemozhetby
Bookmarklets with javascript: protocol break JavaScript on the pages with NoScript 2.6.8.13 installed on Nightly (30.0a1 2014-02-09)

Please, look for the details:

https://bugzilla.mozilla.org/show_bug.cgi?id=970445

Re: Bookmarklets with javascript: protocol break JavaScript

Posted: Mon Feb 10, 2014 10:39 pm
by barbaz
I can confirm this with current SeaMonkey Nightly and NS 2.6.8.14rc1. Using the following bookmarklet typed in the URL bar

Code: Select all

javascript:alert('foo');
on a script-allowed test page, while that alert shows, NoScript seems to think scripts are globally allowed :o

Re: Bookmarklets with javascript: protocol break JavaScript

Posted: Mon Feb 10, 2014 11:24 pm
by therube
> on a script-allowed test page while that alert shows, NoScript seems to think scripts are globally allowed

That is normal & expected.
And that is also going to be different from what the OP is describing.

He is saying that once the bookmarklet has run, the behavior of the page changes.
(And that I can confirm.)

Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0 SeaMonkey/2.26a1

---

Load: https://www.mozilla.org/en-US/
(Allow mozilla.org & mozilla.net if need be)
(Observe that the pictures "flow", change)
Run your JavaScript code: javascript:alert('foo');
(Observe that the pictures are now "static")
Disable NoScript & repeat

Re: Bookmarklets with javascript: protocol break JavaScript

Posted: Tue Feb 11, 2014 12:21 am
by barbaz
therube wrote:He is saying that once the bookmarklet has run, the behavior of the page changes.
Yes, that's what I was saying I could confirm. I incorrectly assumed that NS claiming scripts were globally allowed was related to JS being disabled by bookmarklet execution.
Sorry about the confusion.

Re: Bookmarklets with javascript: protocol break JavaScript

Posted: Tue Feb 11, 2014 6:10 pm
by vsemozhetby
Thank you, it is fixed in the v2.6.8.14rc2.