GNU bug report logs -
#45609
LibreJS blocked from restricted domains
Previous Next
To reply to this bug, email your comments to 45609 AT debbugs.gnu.org.
Toggle the display of automated, internal messages from the tracker.
Report forwarded
to
bug-gnuzilla <at> gnu.org
:
bug#45609
; Package
gnuzilla
.
(Sat, 02 Jan 2021 11:35:02 GMT)
Full text and
rfc822 format available.
Acknowledgement sent
to
jahoti <jahoti <at> envs.net>
:
New bug report received and forwarded. Copy sent to
bug-gnuzilla <at> gnu.org
.
(Sat, 02 Jan 2021 11:35:02 GMT)
Full text and
rfc822 format available.
Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):
Hi!
Using the latest IceCat binaries (v60.7.0) as-is, scripts are allowed to
run freely on the restricted domains listed in the
"extensions.webextensions.restrictedDomains" configuration option due to
limitations imposed on extensions (including LibreJS) for these domains.
LibreJS cannot even see the script and therefore suggests the page is
devoid of scripts entirely.
In particular, when visiting to the Developer Hub on addons.mozilla.org
with a new account and going "submit a new extension" (or "Manage API
keys"), the user is redirected to an agreement page where seemingly
non-free initialization scripts for a Google reCAPTCHA will be loaded
and executed.
Voiding the aforementioned configuration option seems to have some
effect, but fails to block all scripts from executing on the page
https://addons.mozilla.org/ and still fails to register anything in the
pop-up. It hasn't been tested on the offending page above, however. If
it's any help the problem doesn't seem to affect Tor Browser.
~~~ notrms/jahoti
This bug report was last modified 4 years and 164 days ago.
Previous Next
GNU bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd,
1994-97 Ian Jackson.