dslreports logo
site
 
    All Forums Hot Topics Gallery
spc

spacer




how-to block ads


Search Topic:
uniqs
426
share rss forum feed

patcat88

join:2002-04-05
Jamaica, NY
kudos:1

[FireFox] never upgrade your browser (javscript urls banned)

They blocked javascript urls with no option to turn them on »bugzilla.mozilla.org/show_bug.cgi?id=656433 . What is FF, the AOL browser now? I'm sticking with 3.6 for life.



chachazz
Premium
join:2003-12-14
kudos:9
Reviews:
·TELUS

quote:
a short term solution to the bookmarklet-pasting attacks being seen in the wild on Facebook and similar.

The change this bug will make is to disallow loading of javascript: URLs from the URL bar *at all*. This behavior varies slightly from IE 9 which strips the leading "javascript:" from a pasted URL, and Chrome which does something similar.

The approach in this bug still enables bookmarklet functionality through bookmarks as well as entering them on the Web Console or Error Console.
Sounds like a wise move.