GNU bug report logs - #45609
LibreJS blocked from restricted domains

Previous Next

Package: gnuzilla;

Reported by: jahoti <jahoti <at> envs.net>

Date: Sat, 2 Jan 2021 11:35:02 UTC

Severity: normal

To reply to this bug, email your comments to 45609 AT debbugs.gnu.org.

Toggle the display of automated, internal messages from the tracker.

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to bug-gnuzilla <at> gnu.org:
bug#45609; Package gnuzilla. (Sat, 02 Jan 2021 11:35:02 GMT) Full text and rfc822 format available.

Acknowledgement sent to jahoti <jahoti <at> envs.net>:
New bug report received and forwarded. Copy sent to bug-gnuzilla <at> gnu.org. (Sat, 02 Jan 2021 11:35:02 GMT) Full text and rfc822 format available.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: jahoti <jahoti <at> envs.net>
To: bug-gnuzilla <at> gnu.org
Subject: LibreJS blocked from restricted domains
Date: Sat, 2 Jan 2021 07:24:00 +0000
Hi!

Using the latest IceCat binaries (v60.7.0) as-is, scripts are allowed to 
run freely on the restricted domains listed in the 
"extensions.webextensions.restrictedDomains" configuration option due to 
limitations imposed on extensions (including LibreJS) for these domains. 
LibreJS cannot even see the script and therefore suggests the page is 
devoid of scripts entirely.

In particular, when visiting to the Developer Hub on addons.mozilla.org 
with a new account and going "submit a new extension" (or "Manage API 
keys"), the user is redirected to an agreement page where seemingly 
non-free initialization scripts for a Google reCAPTCHA will be loaded 
and executed.

Voiding the aforementioned configuration option seems to have some 
effect, but fails to block all scripts from executing on the page 
https://addons.mozilla.org/ and still fails to register anything in the 
pop-up. It hasn't been tested on the offending page above, however. If 
it's any help the problem doesn't seem to affect Tor Browser.

~~~ notrms/jahoti




This bug report was last modified 4 years and 164 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.