369662 - Limits on JavaScript

Status: VERIFIED DUPLICATE of bug 303760

(Camino Graveyard :: General, enhancement)

Description

[Brandon Patton]

User-Agent:       Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.7) Gecko/20060911 Camino/1.0.3
Build Identifier: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.7) Gecko/20060911 Camino/1.0.3

There should be a way for people to allow some sites to use JavaScript and to block others, similar to what the Firefox extension NoScript does. JavaScript may be the next way for people to hijack computers.

Reproducible: Didn't try

Steps to Reproduce:
1.
2.
3.

Comment 1

[Smokey Ardisson (offline for a while; not following bugs - do not email)]

FWIW, you can do this already by setting up a policy via CAPS: http://www.mozilla.org/projects/security/components/ConfigPolicy.html

Comment 2

[Stuart Morgan]

JS is heavily sandboxed. This shouldn't be filed as a security bug unless you have a specific security hole in Gecko's JavaScript implementation to report.

Comment 3

[Chris Lawson (gone)]

Duping to bug 303760, as that's basically the same thing.