bugLibreJS - Bugs: bug #48227, Links with href values of...

 
 

bug #48227: Links with href values of "javascript:call()" not parsed correctly

Submitter:  Alexandre Oliva <oliva>
Submitted:  Tue 14 Jun 2016 06:13:48 PM UTC
   
 
Category:  None Severity:  3 - Normal
Item Group:  None Status:  In Progress
Privacy:  Public Assigned to:  zwick
Open/Closed:  Open
* Mandatory Fields

Add a New Comment Rich Markup
   

Fri 01 Jun 2018 09:22:03 PM UTC, comment #3: 

This case needs to be added to the test suite

Ruben Rodriguez <rubenquidam>
Group administrator
Fri 23 Feb 2018 04:10:04 AM UTC, comment #2: 

libreJS v7 is now considered to be the current stable release and is a nearly total re-write; so this issue very likely refers to only to the previous version that was obsoleted my mozilla - all further development will be on libreJS v7 so this issue is marked as "wont-fix" for now unless it can be show to pertain also to libreJS v7

as this behavior was seen using libreJS v6, could someone try libreJS v7 on a firefox derivative >= v57 to see if the same issue still exists?

bill-auger <bill_auger>
Group Member
Sun 26 Mar 2017 02:27:48 PM UTC, comment #1: 

I've tried to recreate this behavior with the attached files, but am unable to.

If you remember it, could you please share the exact URL at which you experienced this behavior?

zach wick <zwick>
Group Member
Tue 14 Jun 2016 06:13:48 PM UTC, original submission:  

(I sent this by email to -email is unavailable- back in Aug 2015, but I don't think it made it, so I'm filing it as a bug now, unchanged)

Using a net banking web site with LibreJS enabled, I noticed a button that wouldn't work even after I'd whitelisted all Javascript on the page.  The oddity about it was that, unlike other working buttons that have onclick Javascript snippets, this one had "javascript:call()" in the href field.  View source says:

                                                                <!--LibreJS: Script should be blocked, but page is whitelisted.--><a data-librejs-blocked-src="null" data-librejs-reason="This script is detected as inline, nonfree, defining functions or methods, and the rest of the page as loading external scripts" data-librejs="dryrun" data-librejs-dryrun="librejs/blocked" id="idNext" class="btn_center" href="javascript:sf('X');">Continuar</a>

Nevertheless, although the snippet containing the definition of sf was also whitelisted, clicking on the button didn't do anything.  Even whitelisting the entire web site had no effect.  I suppose that's a bug in LibreJS.  I'm running 6.0.9 on Firefox 40.0 on x86_64.  I'm afraid I don't know how long it's been like that: although I use this web site occasionally, I have only recently installed LibreJS on my browser (in addition to NoScript, that already worked on the ancient IceWeasel I used to use on the Lemote Yeeloong :-)

Thanks for GNU LibreJS!

Alexandre Oliva <oliva>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

Attached Files
file #40146:  inline_scripts.html added by zwick (237B - text/html)
file #40147:  inline_scripts.js added by zwick (59B - application/javascript)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by rubenquidam (Posted a comment)
  • -email is unavailable- added by bill_auger (Posted a comment)
  • -email is unavailable- added by zwick (Updated the item)
  • -email is unavailable- added by oliva (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 7 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2018-06-01 rubenquidam StatusWont Fix In Progress
    2018-02-23 bill_auger StatusNeed Info Wont Fix
    2017-03-26 zwick StatusNone Need Info
        Assigned toNone zwick
        Summarylinks with href=&quot;javascript:&quot; don't work Links with href values of "javascript:call()" not parsed correctly
    2017-03-26 zwick Attached File- Added inline_scripts.html, #40146
        Attached File- Added inline_scripts.js, #40147

    Back to the top

    Powered by Savane 3.14-f13d.
    Corresponding source code