307050 - JS execution in context of current domain

Status: RESOLVED INVALID

(Firefox :: General, defect)

Description

[Zarco Zwier]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a1) Gecko/20050903 Firefox/1.6a1
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a1) Gecko/20050903 Firefox/1.6a1

When a JS URL is enetered in the location bar, it's executed in the context of
the current domain.
It seems that this only works for manually entered JS URLs.

Reproducible: Always

Steps to Reproduce:
1. Go to: http://www.google.nl
2. Go to: javascript:alert(document.cookie)


Actual Results:  
The cookie is displayed

Expected Results:  
The cookie should not be read

Comment 1

[Daniel Veditz [:dveditz]]

This behavior is intentional and shared by other major browsers. It also leads
to useful features like "bookmarklets".