Web Pages are able to prevent me from running local javascript

RESOLVED DUPLICATE of bug 866522

Status

()

Firefox
Security
RESOLVED DUPLICATE of bug 866522
4 years ago
4 years ago

People

(Reporter: Jerry Baker, Unassigned)

Tracking

30 Branch
x86_64
Windows 7
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

4 years ago
Firefox 30.0

Web sites are apparently able to prevent me from running inline javascript (and thus bookmarkletts).

STEPS TO REPRODUCE:

1. Create a bookmark button on the bookmark toolbar with the following URL: javascript:alert('test');
2. Load http://www.github.com
3. Click your bookmark.

RESULT:

Content Security Policy: The page's settings blocked the loading of a resource: An attempt to execute inline scripts has been blocked

EXPECTED:

Web site operators should not be able to remotely operate my computer and prevent me from doing whatever I want to do with my browser.
Status: NEW → RESOLVED
Last Resolved: 4 years ago
Resolution: --- → DUPLICATE
Duplicate of bug: 866522
(Reporter)

Comment 2

4 years ago
Thanks. Fixed with security.csp.enable=false
You need to log in before you can comment on or make changes to this bug.