Closed
Bug 60918
Opened 25 years ago
Closed 25 years ago
HTTPS document containing <A HREF="javascript:..."> causes security warning
Categories
(Core :: Networking, defect, P3)
Tracking
()
People
(Reporter: ken_mori, Assigned: gagan)
Details
(Keywords: testcase)
Attachments
(1 file)
An anchor with <A href="javascript:foo()">Click ME</A> causes a dialog with the
following text to appear when running under https
"You have requested an insecure document. The document and any information you
send back ..."
I'm not sure that it is wrong. Javascript can do whatever it likes, it might
end up violating the security model.
->Networking? If you don't want it, bounce to PSM or JSEng depending on your
preference.
Assignee: asa → gagan
Component: Browser-General → Networking
Keywords: testcase
QA Contact: doronr → tever
Summary: <A> with JavaScript as HREF causes security error under HTTPS → HTTPS document containing <A HREF="javascript:..."> causes security warning
|
||
Comment 3•25 years ago
|
||
Of course this is wrong. Mozilla should throw a security warning _if_ JS tries to do something insecure. My bank uses javascript all over the place.
In any case, this is likely a dupe of 59499
Reporter, go vote for that bug, who knows, it may make a difference!
|
|
||
Comment 4•25 years ago
|
||
Definate duplicate of bug 59499. Marking as such.
*** This bug has been marked as a duplicate of 59499 ***
Status: UNCONFIRMED → RESOLVED
Closed: 25 years ago
Resolution: --- → DUPLICATE
Verified dupe of bug 59499: "javascript popup new window causes false warning
message with secure (ssl/https) sites."
Status: RESOLVED → VERIFIED
You need to log in
before you can comment on or make changes to this bug.
Description
•