Page 1 of 1

noscript.allowURLBarJS

Posted: Thu May 15, 2014 4:39 pm
by antipop
I am not a developer, and I have very little idea about what this thing is: noscript.allowURLBarJS. It seems to be causing me a bit of a problem. I have a program whose help-file opens into my default browser, Firefox. The help-file has links in it, which also are supposed to open in the browser. Normally, I would use the mouse to middle click on the link in order to open it in another tab. However, whenever I try to do that now, it opens a blank tab. When I tried copying and pasting the link in another tab, I get a popup apparently from NoScript saying this:

"javascript: and data: URIs typed or pasted in the address bar are disabled to prevent social engineering attacks. Developers can enable them for testing purposes by toggling the "noscript.allowURLBarJS" preference."

Not being a developer, I am probably better off leaving the thing alone, aside from the fact that I cannot even see this place to toggle the preference if I wanted to do so. Still, I was wondering whether there is a way to allow such functionality on an individual program basis? What seems weird to me is that I am allowed to open this same link directly by left-clicking on it.

Re: noscript.allowURLBarJS

Posted: Thu May 15, 2014 5:05 pm
by barbaz
Can you post here the entire href attribute of that link? (wrap in code tags please)
You should be able to get it by right-clicking the link and clicking Inspect element.
antipop wrote:I cannot even see this place to toggle the preference if I wanted to do so.
about:config -> noscript.allowURLBarJS
but don't mess with that unless you personally need to type custom javascript: or data: URIs in the address bar and/or you are able to understand for yourself what they are/do by looking at them

Re: noscript.allowURLBarJS

Posted: Thu May 15, 2014 5:09 pm
by therube
> I have a program

What program?
Is the Help a local file or does it actually go out to the web?

What is the link that you're trying to paste?

Suppose it is in fact a JavaScript link, & what is "copyable" wouldn't work, pasted, into the URL line in any case, meaning that making a change to noscript.allowURLBarJS wouldn't help.

Re: noscript.allowURLBarJS

Posted: Thu May 15, 2014 6:14 pm
by antipop
> "Can you post here the entire href attribute of that link? (wrap in code tags please)
You should be able to get it by right-clicking the link and clicking Inspect element."

This program is VMWare Player on Windows 7 OS. The link is for its help-file, and it is to another place in the same file on this local machine, not a link to an external resource on Internet. Here is what it shows when I right-click and copy the link:


javascript:WWHClickedPopup('player_win',%20'GUID-CC791418-B30C-487D-8F57-E7E855B61549.html#3_28_15_12_1',%20'');

Re: noscript.allowURLBarJS

Posted: Thu May 15, 2014 7:02 pm
by barbaz
I'm surprised that ever worked correctly opening in a new tab with middle click.

I guess the easiest solution would be if you use some sort of "Duplicate Tab" add-on like this so that you could keep your existing tab and still open that link via normal link click.

Re: noscript.allowURLBarJS

Posted: Thu May 15, 2014 10:38 pm
by therube
> surprised that ever worked correctly opening in a new tab with middle click

Attempt to fix JavaScript links, I suppose?

> Duplicate Tab

Ctrl+Enter on the URL bar. (FF is different. Maybe it is Alt+Enter there?)