bugLibreJS - Bugs: bug #48227, Links with href values of...

 
 

bug #48227: Links with href values of "javascript:call()" not parsed correctly

Submitted by:  Alexandre Oliva <oliva>
Submitted on:  Tue 14 Jun 2016 06:13:48 PM UTC  
 
Category:  None Severity:  3 - Normal
Item Group:  None Status:  Wont Fix
Privacy:  Public Assigned to:  zach wick <zwick>
Open/Closed:  Open

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Fri 23 Feb 2018 04:10:04 AM UTC, comment #2:

libreJS v7 is now considered to be the current stable release and is a nearly total re-write; so this issue very likely refers to only to the previous version that was obsoleted my mozilla - all further development will be on libreJS v7 so this issue is marked as "wont-fix" for now unless it can be show to pertain also to libreJS v7

as this behavior was seen using libreJS v6, could someone try libreJS v7 on a firefox derivative >= v57 to see if the same issue still exists?

bill-auger <bill_auger>
Project Member
Sun 26 Mar 2017 02:27:48 PM UTC, comment #1:

I've tried to recreate this behavior with the attached files, but am unable to.

If you remember it, could you please share the exact URL at which you experienced this behavior?

zach wick <zwick>
Project AdministratorIn charge of this item.
Tue 14 Jun 2016 06:13:48 PM UTC, original submission:

(I sent this by email to -email is unavailable- back in Aug 2015, but I don't think it made it, so I'm filing it as a bug now, unchanged)

Using a net banking web site with LibreJS enabled, I noticed a button that wouldn't work even after I'd whitelisted all Javascript on the page. The oddity about it was that, unlike other working buttons that have onclick Javascript snippets, this one had "javascript:call()" in the href field. View source says:

<!--LibreJS: Script should be blocked, but page is whitelisted.--><a data-librejs-blocked-src="null" data-librejs-reason="This script is detected as inline, nonfree, defining functions or methods, and the rest of the page as loading external scripts" data-librejs="dryrun" data-librejs-dryrun="librejs/blocked" id="idNext" class="btn_center" href="javascript:sf('X');">Continuar</a>

Nevertheless, although the snippet containing the definition of sf was also whitelisted, clicking on the button didn't do anything. Even whitelisting the entire web site had no effect. I suppose that's a bug in LibreJS. I'm running 6.0.9 on Firefox 40.0 on x86_64. I'm afraid I don't know how long it's been like that: although I use this web site occasionally, I have only recently installed LibreJS on my browser (in addition to NoScript, that already worked on the ancient IceWeasel I used to use on the Lemote Yeeloong :-)

Thanks for GNU LibreJS!

Alexandre Oliva <oliva>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

Attached Files
file #40146:  inline_scripts.html added by zwick (237B - text/html)
file #40147:  inline_scripts.js added by zwick (59B - application/javascript)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by bill_auger (Posted a comment)
  • -email is unavailable- added by zwick (Updated the item)
  • -email is unavailable- added by oliva (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 6 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    Fri 23 Feb 2018 04:10:04 AM UTC bill_auger StatusNeed Info => Wont Fix
    Sun 26 Mar 2017 02:27:48 PM UTC zwick StatusNone => Need Info
        Assigned toNone => zwick
        Summarylinks with href="javascript:" don't work => Links with href values of "javascript:call()" not parsed correctly
    Sun 26 Mar 2017 02:25:31 PM UTC zwick Attached File- => Added inline_scripts.html, #40146
        Attached File- => Added inline_scripts.js, #40147

    Back to the top


    Powered by Savane 3.3