Open Bug 1733830 Opened 3 years ago Updated 8 months ago

Sites can recode right-click and block the inspector and other safety tools from inspecting harmful elements

Categories

(Core :: DOM: Events, defect)

Firefox 92
defect

Tracking

()

Tracking Status
firefox93 --- affected
firefox94 --- affected
firefox95 --- affected

People

(Reporter: erwinm, Unassigned)

References

Details

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:92.0) Gecko/20100101 Firefox/92.0

Steps to reproduce:

Stumbled onto

https://simpsonswiki.com/wiki/Canyonero

Migraine warning for animated text.

Actual results:

Tried to inspect and block the animated text.

The site treats right-click there as a center click, blocking both the inspector and safety tools such as uBlock origin.

Expected results:

Why should sites be allowed to block safety tools?

Summary: Sites can break inspector → Sites can recode right-click and block the inspector and other safety tools from inspecting harmful elements

The Bugbug bot thinks this bug should belong to the 'DevTools::Inspector' component, and is moving the bug to that component. Please revert this change in case you think the bot is wrong.

Component: Untriaged → Inspector
Product: Firefox → DevTools

Also affects Discord, which makes it impossible to block animated images.

Press <Shift> while right-clicking to bypass the site's hijacking of the contextual menu.

Moving back to Firefox Untriaged.

As mentioned by rhill@raymondhill.net, you can use shift + right click, although I can't find any mention in the current html specification for this. According to old bugs (https://bugzilla.mozilla.org/show_bug.cgi?id=692139) it used to be part of the spec, but it might be outdated now.

Component: Inspector → Untriaged
Product: DevTools → Firefox
See Also: → 617528, 692139

Managed to reproduce this on Windows 10 x64, macOS 11.4 and on Ubuntu 20.04. The issue is also reproducible on Chrome.

Severity: -- → S4
Status: UNCONFIRMED → NEW
Component: Untriaged → DOM: Events
Ever confirmed: true
OS: Unspecified → All
Product: Firefox → Core
Hardware: Unspecified → All

According to the recent resolution of bug 1759303 , this is intended behavior.

You need to log in before you can comment on or make changes to this bug.