1851700 - Console self XSS UI could be more visible

Status: UNCONFIRMED

(DevTools :: Console, defect, P3)

Description

[Nax [:Naxterra]]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/117.0

Steps to reproduce:

F12 > Console > Try to paste something

Actual results:

Nothing is happening. I can type normally but I cannot copy paste anything

Expected results:

It should have copy pasted my commands

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

The Bugbug bot thinks this bug should belong to the 'DevTools::Console' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.

Comment 2

[Nicolas Chevobbe [:nchevobbe]]

Hello Naxterra, can you tell me which OS you're running?
How are you pasting (e.g. middle-click , ctrl+v, …)?
Is this something that used to work for you?
Are you seeing the Scam Warning UI ?

thanks!

Comment 3

[Nax [:Naxterra]]

Hello
I am using Windows 11 and FF version is 117.0. I am trying with CTRL+C CTRL+V and right click paste. Both are not working.

Edit. I saw that scam warning now and after typing Allow pasting it worked.

Is it possible to make this more visible or put it into under Settings?

Comment 4

[Nicolas Chevobbe [:nchevobbe]]

I feel like the warning is visible enough, but maybe it could use some tweaks?
Can you go to about:config and set devtools.selfxss.count back to 0, try to paste again and post a screenshot of the console with the scam warning message please?

Comment 5

[Nax [:Naxterra]]

Attachment: XSS UI

Scam warning in Console

Comment 6

[Julian Descottes [:jdescottes]]

We could make this more visible, or maybe show it in a different area (eg log a warning / error directly in the console).
Nicolas will add the reference to a bug to review the console markup which could help here.

Comment 7

[Nicolas Chevobbe [:nchevobbe]]

(In reply to Julian Descottes [:jdescottes] from comment #6)

Nicolas will add the reference to a bug to review the console markup which could help here.

This is Bug 1844102