Page 1 of 1

Noscript fail on mailto javascript links ?

Posted: Sat Jul 09, 2011 4:29 pm
by akiteko
Hi,

Can someone confirm that I am not mad ?

http://www.lady-tsigane-boutique.com/hu ... cateur.htm

Check out this page, there a "Poser une question a propos de ce produit" link, when I click on it the mail thing spawns, firefox can interpret it as a valid mailto:, however it should not work because it's inside a Javascript statement. I have tried to copy/paste the code in a html file, I then tried to access it with firefox/noscript, when I click on the link nothing happens as expected with noscript.

Nothing's allowed, I revoked temporary permissions.

Why doesn't noscript blocks the link on the website ? Can you reproduce it or give me any hints ?

Re: Noscript fail on mailto javascript links ?

Posted: Sat Jul 09, 2011 4:44 pm
by Giorgio Maone
NoScript Options|Advanced|Untrusted|Attempt to fix Javascript links

Re: Noscript fail on mailto javascript links ?

Posted: Sat Jul 09, 2011 5:21 pm
by akiteko
It did the trick, I suppose it's not harmful to leave it on, you know your stuff :).

But I'm curious about why did it get blocked anyway on localhost.

Re: Noscript fail on mailto javascript links ?

Posted: Sun Jul 10, 2011 2:40 pm
by therube
when I click on it the mail thing spawns, firefox can interpret it as a valid mailto:, however it should not work because it's inside a Javascript statement
NoScript Options|Advanced|Untrusted|Attempt to fix Javascript links
The latter is set, but the mailto: link does not respond in SeaMonkey?

Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20110706 Firefox/5.0 SeaMonkey/2.2

Re: Noscript fail on mailto javascript links ?

Posted: Sun Jul 10, 2011 3:00 pm
by Giorgio Maone
therube wrote:
when I click on it the mail thing spawns, firefox can interpret it as a valid mailto:, however it should not work because it's inside a Javascript statement
NoScript Options|Advanced|Untrusted|Attempt to fix Javascript links
The latter is set, but the mailto: link does not respond in SeaMonkey?

Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20110706 Firefox/5.0 SeaMonkey/2.2
Because there's no subject (it couldn't be decoded because the decoding routine is JavaScript as well, and cannot be emulated).

Re: Noscript fail on mailto javascript links ?

Posted: Sun Jul 10, 2011 3:15 pm
by therube
But why is the response seen in FF5 different?

Re: Noscript fail on mailto javascript links ?

Posted: Sun Jul 10, 2011 3:23 pm
by Giorgio Maone
therube wrote:But why is the response seen in FF5 different?
Is SM your default mail client?

Re: Noscript fail on mailto javascript links ?

Posted: Sun Jul 10, 2011 3:27 pm
by therube
I don't know that I have a default mail client?
(SeaMonkey Mail is not.)

Event setting network.protocol-handler.external.mailto;true, I still get no response?

Re: Noscript fail on mailto javascript links ?

Posted: Sun Jul 10, 2011 3:34 pm
by therube
If I allow www.lady-tsigane-boutique.com
& enable network.protocol-handler.external.mailto;true
then I get, "mailto: is not a registered protocol".

Otherwise the setting of NoScript Options|Advanced|Untrusted|Attempt to fix Javascript links appears to have no bearing?