1378875 - Extension generated data URI cannot run inline javascript

Status: RESOLVED DUPLICATE of bug 1324406

Description

[Danny Lin]

User Agent: Mozilla/5.0 (Windows NT 6.1; rv:53.0) Gecko/20100101 Firefox/53.0
Build ID: 20170518000419

Steps to reproduce:

Run the below code in an extension page (e.g. options.html):

function stringToDataURI(str, mime, charset) {
  return 'data:' + mime + (charset ? ';charset=' + charset : "") + ',' + encodeURIComponent(str);
}

var content = '<script>alert("Hello world");</script>';
var url = stringToDataURI(content, "text/html", "UTF-8");
window.open(url);


Actual results:

The alert does not run.


Expected results:

The alert inside the data URI should run.