SyntaxChecker sandbox needs JS_VERSION
Posted: Sat Dec 10, 2011 2:30 pm
Code: Select all
return Cu.evalInSandbox(s, this.sandbox);
NoScripters and WebSec nerds of all lands, unite!
https://forums.informaction.com/
Code: Select all
return Cu.evalInSandbox(s, this.sandbox);
with ECMAv5, @* surrogate runs for frames but not top level windowsal_9x wrote:with the above fixed, surrogates still don't seem to be running at all with ECMAv5
No, only "1.8." Did you find that 1.8 was inadequate, how?Giorgio Maone wrote:Does 1.85 work?
Looking at the Mozilla source code, I found the highest supported version has an identifier string of "1.85", while "ECMAv5" is a sort of alias for "latest version".al_9x wrote:No, only "1.8." Did you find that 1.8 was inadequate, how?Giorgio Maone wrote:Does 1.85 work?
I have sandbox=true in my main profile and besides always confirm in a clean profile, however I don't think sandbox matters here. This is the clause that affects @ surrogates (right?), for top level windows it chooses this.execute, regardless of sandbox.Giorgio Maone wrote:On a side note, I strongly suspect this problem affects only users (like you) who have noscript.surrogate.sandbox set to false (i.e. those are not valid version identifiers for the <script> element).
Code: Select all
scriptURL === pageURL ? let (win = document.defaultView) win != win.top ? this.executeSandbox : this.execute