947635 - [internetbank.swedbank.se] Remove use of navigator.plugins.length

Status: RESOLVED INVALID

(Web Compatibility :: Site Reports, defect)

Description

[Cork]

This bug is filed as requested from bug 942587
The url: https://internetbank.swedbank.se/bviPrivat/privat?ns=1

Detection script is here: https://internetbank.swedbank.se/identifieringidp/js/bisp.js
The problematic line is line 145: if (navigator.plugins.length > 0) {

As the script is injected after load, put a breakpointing on the setTimeout call in the main html page and inject "Object.defineProperty(navigator.plugins, 'length', { value: 1 })" in the page fix it.

Script section:
 97: $(document).ready(function(){
 98:    addJS("identifieringidp", "bisp.js");
 99:    setTimeout("waitToAuth('AULOh0/wRYOa7JEZVuRNNWuJYfpzF/6Apr1B2I6EFGtW', 'MS4yLjc1Mi43OC4xLjI7MS4yLjMuNC4xMA==', 'Mi41LjQuNT0xOTgxMTEwNjQ5MzA=','false','1386444443')",500);
100: });

Detection script section:
144: if(navigator.plugins) {
145:    if (navigator.plugins.length > 0) {
146:       if (navigator.mimeTypes && navigator.mimeTypes["application/x-personal-version"]) {
147:          if (navigator.mimeTypes["application/x-personal-version"].enabledPlugin) {
148:             pluginname = 'versionpluginId';
149              installed = true;
150:          }
151:       }
152:    }
153: }

Comment 1

[Cork]

A bit of an update, I still haven't managed to get into contact with this company. Starts to look like I might have to go to there office with a letter...

Comment 2

[Karl Dubost💡 :karlcow]

Reaching this URL, we are redirected to 
https://internetbank.swedbank.se/idp/portal/identifieringidp/idp/dap1/ver=2.0/rparam=execution=e1s2

Comment 3

[Cork]

The sites has moved to the new api that doesn't relay on navigator.plugins anymore.