NoScript forces display of hidden <a>
Posted: Wed Jul 13, 2011 2:15 pm
NoScript versions I've tested: 2.1.2.1rc1 (FF 5.0), 2.1.1.2 (FF 3.6.18)
Demo: http://keku.mit.edu/noscript_test.php
Expected result:
Scripts enabled: the text "google - javascript enabled"
Scripts disabled: the text "testing. you shouldn't see a link."
Observed result:
Scripts enabled: the text "google - javascript enabled"
Scripts disabled: the text "testing. you shouldn't see a link.
google" (this is the <a> element that shouldn't be displayed)
Notice that if you select the whole page when scripts are disabled using NoScript and use "View selection source", you see two <a> elements, one being the original link and the other inserted before the closing </body> tag:
This second link should not be there.
I've tried just disabling scripts on a Firefox profile with no addons and got the expected result so this must be a NoScript bug.
Demo: http://keku.mit.edu/noscript_test.php
Expected result:
Scripts enabled: the text "google - javascript enabled"
Scripts disabled: the text "testing. you shouldn't see a link."
Observed result:
Scripts enabled: the text "google - javascript enabled"
Scripts disabled: the text "testing. you shouldn't see a link.
google" (this is the <a> element that shouldn't be displayed)
Notice that if you select the whole page when scripts are disabled using NoScript and use "View selection source", you see two <a> elements, one being the original link and the other inserted before the closing </body> tag:
Code: Select all
<a style="visibility: visible; display: block;" href="http://google.com">google</a>
I've tried just disabling scripts on a Firefox profile with no addons and got the expected result so this must be a NoScript bug.