bugLibreJS - Bugs: bug #48227, Links with href values of...

 
 

bug #48227: Links with href values of "javascript:call()" not parsed correctly

Submitted by:  Alexandre Oliva <oliva>
Submitted on:  Tue 14 Jun 2016 06:13:48 PM UTC  
 
Category: NoneSeverity: 3 - Normal
Item Group: NoneStatus: Need Info
Privacy: PublicAssigned to: zach wick <zwick>
Open/Closed: Open

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Sun 26 Mar 2017 02:27:48 PM UTC, comment #1:

I've tried to recreate this behavior with the attached files, but am unable to.

If you remember it, could you please share the exact URL at which you experienced this behavior?

zach wick <zwick>
Project AdministratorIn charge of this item.
Tue 14 Jun 2016 06:13:48 PM UTC, original submission:

(I sent this by email to -unavailable- back in Aug 2015, but I don't think it made it, so I'm filing it as a bug now, unchanged)

Using a net banking web site with LibreJS enabled, I noticed a button that wouldn't work even after I'd whitelisted all Javascript on the page. The oddity about it was that, unlike other working buttons that have onclick Javascript snippets, this one had "javascript:call()" in the href field. View source says:

<!--LibreJS: Script should be blocked, but page is whitelisted.--><a data-librejs-blocked-src="null" data-librejs-reason="This script is detected as inline, nonfree, defining functions or methods, and the rest of the page as loading external scripts" data-librejs="dryrun" data-librejs-dryrun="librejs/blocked" id="idNext" class="btn_center" href="javascript:sf('X');">Continuar</a>

Nevertheless, although the snippet containing the definition of sf was also whitelisted, clicking on the button didn't do anything. Even whitelisting the entire web site had no effect. I suppose that's a bug in LibreJS. I'm running 6.0.9 on Firefox 40.0 on x86_64. I'm afraid I don't know how long it's been like that: although I use this web site occasionally, I have only recently installed LibreJS on my browser (in addition to NoScript, that already worked on the ancient IceWeasel I used to use on the Lemote Yeeloong :-)

Thanks for GNU LibreJS!

Alexandre Oliva <oliva>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

Attached Files
file #40146:  inline_scripts.html added by zwick (237B - text/html)
file #40147:  inline_scripts.js added by zwick (59B - application/javascript)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by zwick (Updated the item)
  • -unavailable- added by oliva (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 5 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Sun 26 Mar 2017 02:27:48 PM UTCzwickStatusNone=>Need Info
      Assigned toNone=>zwick
      Summarylinks with href="javascript:" don't work=>Links with href values of "javascript:call()" not parsed correctly
    Sun 26 Mar 2017 02:25:31 PM UTCzwickAttached File-=>Added inline_scripts.html, #40146
      Attached File-=>Added inline_scripts.js, #40147

    Back to the top


    Powered by Savane 3.1-cleanup1