Thread replies: 11
Thread images: 1
Thread images: 1
Anonymous
Firefox noscript bug 2017-08-24 02:20:11 Post No. 62064468
[Report] Image search: [Google]
Firefox noscript bug 2017-08-24 02:20:11 Post No. 62064468
[Report] Image search: [Google]
mozilla annoys me: I recently discovered that with the new webextensions you cannot "disable" javascript. you can only block it. there is an api which actually seems to be similar or even the same as the one in chrome:
tab.responseHeaders.push({
'name': 'Content-Security-Policy',
'value': 'script-src \'none\''
});
the problem with this crap is that javascript is not really disabled - it is blocked.
however, stupid as they were when they implemented this api, <noscript> tags are not treated the way they should be.
they are ignored, in the same way they would be ignored if javascript was enabled.
I have already filled a bug report and I have even hacked a webextension that inserts another fucking javascript file which then grabs all the <noscript> tags and replaces them with <span>. now my addon was rejected because:
>This version didn't pass review because of the following problems:
>
> This add-on is creating DOM nodes from HTML strings containing potentially unsanitized data,
>by assigning to innerHTML, jQuery.html, or through similar means.
>Aside from being inefficient, this is a major security risk.
>For more information, see https://developer.mozilla.org/en/XUL_School/DOM_Building_and_HTML_Insertion .
what do?
also:
there is no ?ltern?tive
>>
uMatrix doesn't have this problem
>>
>>62064644
I just checked and sorry - yes it does have the problem.
if I use only uMatrix to block everything except images and css on any page that has <noscript> tags, they will not be rendered or used for DOM building.
>>
>>62064781
That's good since the CIA niggers can't tell I'm blocking scripts. The scripts are however still blocked since unlike NoScript, uMatrix blocks the script from being fetched.
>>
>>62064468
>disabling js
use icecat
>>
>>62064827
how can they tell that you are blocking scripts just by NOT RENDERING <noscript> tags in your browser which have already been downloaded as part of the html?
if there was a <meta http-equiv="fresh"> anywhere, then you could be redirected. that should be disabled and this is another topic.
I did not know that NoScript fetches the blocked scripts. I am not using NoScript but this makes me wonder.
>>
>>62064848
I doubt that IceCat version 57 will behave differently than Firefox nightly 57
I also do not disable JS. I could do that in about:config and Javascript.enabled = false.
I just want to disable javascript on some pages.
>>
>>62064827
Looks like even web technology is too hard for /g/ now.
>>
>>62065115
I think that he was trolling because
>2017
>disable javascript
>wtf
>>
>>62065248
we js nao
>>
>>62065392
we lost privacy nao
have you got any meaningful addition to the topic of <noscript> tags in new firefox versions?
Thread posts: 11
Thread images: 1
Thread images: 1