1047005 - Web Pages are able to prevent me from running local javascript

Status: RESOLVED DUPLICATE of bug 866522

(Firefox :: Security, defect)

Description

[Jerry Baker]

Firefox 30.0

Web sites are apparently able to prevent me from running inline javascript (and thus bookmarkletts).

STEPS TO REPRODUCE:

1. Create a bookmark button on the bookmark toolbar with the following URL: javascript:alert('test');
2. Load http://www.github.com
3. Click your bookmark.

RESULT:

Content Security Policy: The page's settings blocked the loading of a resource: An attempt to execute inline scripts has been blocked

EXPECTED:

Web site operators should not be able to remotely operate my computer and prevent me from doing whatever I want to do with my browser.

Comment 2

[Jerry Baker]

Thanks. Fixed with security.csp.enable=false