Closed Bug 822213 Opened 11 years ago Closed 10 years ago

Scripted event handlers run in designMode documents, even though "scripts are disabled"

Categories

(Core :: DOM: Editor, defect)

Product:
Core
Component:
DOM: Editor
Platform:
x86_64
macOS
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED INVALID

People

(Reporter: jruderman, Unassigned)

References

Details

(Keywords: testcase)

Attachments

(1 file)

testcase based on Martijn's
706 bytes, text/html
Details 
It seems bug 386495 was not fixed completely:

When setting designMode to 'on', timers and onclick attributes are disabled, but event listeners installed using addEventListener remain active.  (And the original script continues running as well, which may or may not be a bug.)

See also bug 765780, where we are considering changing our policy, and just allowing scripts to run in designMode.
I think this is a dup.
Indeed.  And one that might get fixed by 822470.
Depends on: 822470
Whiteboard: DUPEME
Depends on: 835643
Depends on: 862627
We no longer disable script in designmode documents.
Status: NEW → RESOLVED
Closed: 10 years ago
Resolution: --- → INVALID
Whiteboard: DUPEME
You need to log in before you can comment on or make changes to this bug.