Is turning off iFrames via about:config browser.frames.enabled;false broken in Firefox 23?
I noticed that Firefox with version 23 removed option to turn OFF JavaScriipt from Tools > Options > Content menu
http://www.extremetech.com/computing/163291-firefox-23-finally-kills-the-blink-tag-removes-ability-to-turn-off-javascript-introduces-new-logo
Recent events when allegedly FBI used JavaScript in iframe to exploit bug in Firefox with intentions to uncover identity of users of TOR network encouraged me to play with security settings a bit.
More about how FBI exploited Firefox bug to execute malitious JavaScript on users computers: https://lists.torproject.org/pipermail/tor-announce/2013-August/000089.html More biased articles can be found in popular media articles. Just google "TOR exploit FBI"
ISSUE:
Symptoms:
I noticed that turning iFrames OFF in about:config > browser.frames.enabled;false seems to not be working as expected. Iframes are still shown and JavaScript in them is executed. Doesnt work even after resterting Firefox.
Testing:
I used this pages to test iFrames:
•https://sites.google.com/site/annuairevin/test-page
•http://www.w3schools.com/tags/tryit.asp?filename=tryhtml_iframe
•http://www.quirksmode.org/iframetest.html
After I turned browser.frames.enabled OFF and restarted I noticed that iFrames are still shown on all 3 pages and JavaScript in them would be executed.
By blocking IFRAMES with NoScript blocking turned ON (you have to turn forbidding IFRAMES on manually in options http://i.imgur.com/7jctoTW.png) I managed to block IFRAMES on google and w3school pages.
!!!Text in iframe "Test page in iframe" on quirksmode test page was still shown even after I have frames turned OFF in about:config and I block all scripts and frames and iframes with NoScript.
If I open same page (http://www.quirksmode.org/iframetest.html) with Opera with iFrames blocked in Preferences, iFrame is not shown at all, browser doesnt even render empty square; but JavaScript in it is executed, if you dont disable JavaScript in Preferences > Advanced.
I didnt test Chrome at all.
Possible things that can cause bug:
•I am using NoScript 2.6.7, I turned it off and on but it is possible that it is overriding Firefox settings in about:config. when you serach about:config for "frames" there are many settings mentioning frames from NoScript and AdBlockPlus.
•AdBlock Plus 2.3.2? Same reason as NoScript.
•Fot the first time I noticed Shield in the address bar with "Firefox has blocked content that isnt secure" bubble. http://i.imgur.com/K4FL65n.png. I dont know how long this feature is implemented or what exactly it does, here are some details: https://support.mozilla.org/en-US/kb/how-does-content-isnt-secure-affect-my-safety?as=u&utm_source=inproduct
P.S. Just small remark. If that is true: "Finally, Firefox 23 removes the option to disable JavaScript from the Options pane — and if you had JavaScript turned off, it has been turned back on." There should be some warning when Firefox is updated that JS was turned ON. I think that for me FF updated silently without any messages. OR maybe I blatantly closed some windows, i dont remember well.
The documentation I find on browser.frames.enabled is very vague, but I can't see that it does anything currently. Is this a feature you used successfully in an earlier version?
The Mixed [Active] Content Blocker was turned on by default in Firefox 23. That would explain the shield icon. Not sure whether implementing that might have changed how iframes are handled.
Similar Messages
-
In the URL bar, type about:config
Type geo.enabled
Double click on the geo.enabled preference
Location-Aware Browsing is now disabled
Google will not remove their location aware feature saying it is picked up by the location aware feature in my firefox browser and referred me to your like where I found the above to disable this feature. It just sent me to a yahoo search page. How do you disable this I want to use US Google not Google.ua and you don't need this to help me locate anything in the Ukraine. When I take my laptop with me on trips does my firefox local change wherever I go?See:
* http://www.mozilla.com/firefox/geolocation/
*http://browserspy.dk/geolocation.php -
How can I turn off charging via usb of my iphone 4s when I connect it to my computer?
how can I turn off charging via usb of my iphone 4s when I connect it to my computer?
You cannot.
Why would you want such a thing? -
everytime i start firefox it opens on firefox start page. i don't want this. i want my own home page. i have changed it several times in 'options-general-when firefox starts...' but alas to no avail..it still starts up with the firefox start page. i have also gone to 'about:config' and changed the value of 'browser.startup.homepage' to my homepage. i restarted firefox and it worked...but just the once. the next time i opened firefox it started up once again with the firefox homepage. i have done scans, i have tried to remove the hometab with various anti virus/anti malware programms.. i have sieved through my registry..it doesn't matter what i do.. firefox starts up with it's own homepage which i do not want. please can you help?.. it's driving me nuts. i don't really want to have to reinstall firefox. thanks in advance x ps. firefox also keeps crashing on me :(
ohhh right!! i have been educating myself as i didn't understand what this user.agent.override.pref meant .. now i get it.. yes i will keep an eye on that when firefox next updates...at the moment everything is running smoothly so i'm going to leave it as it is for now. but at least now i know what it all means.. ahh you learn something new every day :-) thanks everyone x
-
in FF 3 I had the close tab button on the far right side with the
browser.tabs.closeButtons config to 3.
This doesn't work in FF4 anymore, what are my options?
So far I stay on 3.6 as this is a feature I really like to have.
Thanks
TiloI'm the opposite, I like having the close button right on each tab - it's more clear to me which one I'm closing then.
To do that, about:config. Set browser.tabs.closeButtons to value 1. -
Command to turn off Bluetooth via ARD
I'd like to turn off Bluetooth and Airport via ARD on all of my Macs (all running Leopard) that don't need them.
I can do this for Airport using networksetup -setairportpower off, but I can't find a similar command for Bluetooth. I don't really want to completely disable it so I'd like to leave the kernel extensions intact, just turn it off. Does such a command exist?you can install bueutil on all macs and use that.
http://www.frederikseiffert.de/blueutil/
I don't know any other way to turn bluetooth off/on from command line. -
Turn off wireless via Windows 7, not opening Elitebook
I know that you can touch the backlit wireless icon beneath the screen to turn WiFi on/off. However, my notebook is often in a docking station, lid down (since I use a big external screen). Opening the lid causes the screen to flip, so I don't want to open and close the screen just to turn off WiFi. Is there a way to turn off WiFi by navigating to some switching on Windows 7?
Then I suggest that you turn the wireless off before you dock your elitebook.
It is five bars.
This is a Windows 7 Desktop. Left-click on the wireless icon to get this to appear. A right-click will only produce a menu with the troubleshoot and Open Network and Sharing Center options
****Please click on Accept As Solution if a suggestion solves your problem. It helps others facing the same problem to find a solution easily****
2015 Microsoft MVP - Windows Experience Consumer -
Why does my Satellite C655D-S5300 turn off randomly after about 45 minutes to 1.5 hours
Was wondering why my laptop turns off randomly for no reason. It does this even if no battery is connected and the AC adapter is connected. It starts right up again if I press the power button but only lasts for an hour or so then shuts down again? When it starts I do hear the fan going and the system works just fine until it randomly shuts down. Upon restarting the usual windows error indicated improper shut down happened. Could it be a bios problem or a virus?
Solved!
Go to Solution.Hi Peter,
Well, I finally gave up and took it into a professional repair place who simply updated the BIOS and that solved the problem. Runs like a champ now. I should have checked that before taking it in...would have been a quick fix and saved
$100. Oh well, thanks for the reply.
Jordan -
please help, I want to disable location aware browsing, thanks
See:
* http://www.mozilla.com/firefox/geolocation/
*http://browserspy.dk/geolocation.php -
Turn off Office Documents opening in Browser
I've gone into Site Settings/Advanced Settings and set it so that Office documents will open only in the client application and NOT in the Browser, but it still tries to open them in the browser.
What am I missing?Hi Elmo,
Pls check the below
Navigate to site collection feature and search for "Open Documents
in Client Applications by Default" and activate the feature.
if you want to change only for particular document library then from document library settings ->General settings-> advance settings->under Opening
Documents in the Browser section->Open in
the client application.
Please remember to click 'Mark as Answer' on the answer if it helps you -
How to turn off marketing texts about Smart talk?
I seem to constantly get texts from BT about using my mobile for using smarttalk to make calls
It says to text 61998 with Stop, to make them stop, but unfortunatly, the texts never go through, so the texts keep on coming.
Anyone know of a way to stop these freaking things?Ah I think it's because the iphone keeps putting a space after the second digit.
-
Turn off bluetooth via applescript when power is disconnected
Hello all
I've been fallowing this older thread here:
http://discussions.apple.com/thread.jspa?messageID=2109999
I've followed the instructions of the post,but when I run the script I get this
error:
Usage: grep [OPTION]... PATTERN [FILE]...
Try `grep --help' for more information.
sh: line 1: Applications: command not found
Does anyone know if there is an updated version of this type of script or
if this can be corrected?
ThanksHello
I'm afraid that the code by Michael Henley in the referred thread has been altered by the fora software introduced in 2007. Perhaps the ac_power() handler should be read as -
to ac_power()
(do shell script "pmset -g | grep \\*") starts with "AC Power"
end ac_power
Good luck,
H
PS. Please copy code from this web page, not from subscribed email text, for I escaped some character for posting; namely \. -
I use the flexible space bar to center up my: Home, refresh & cancel buttons to the middle of my browser. but when i close and then open Firefox they automatically jump the the left side of the screen again next to the back and forward buttons. here is a snip shot of what an where i mean: http://oi53.tinypic.com/kd7by8.jpg
Whoa you guys are fast at responding even though you have alot of new requests: Sorry, i'll give you a better shot this time at the bottom, but first i need to talk about the email you sent me.
Your link to this question that was given in my email takes you to a blank Firefox page if you are not logged in, Please make a modification to the page to tell users to sign in. this is the web address given to me: https://support.mozilla.com/questions/758231#answer-110012 but i had to delete the *#answer-110012* at the end of the address to connect to this quiry, where it then asked me to sign in.
Here are better screen shots: Here is where i like the three icons to be (circled in blue): http://oi54.tinypic.com/11bucev.jpg but every time i open Firefox they go here by themselves: http://oi54.tinypic.com/6eekus.jpg -
Turn off display pdf in browser
is there a registry key that we can modify to turn off the diplay pdf in browser check box? we have a application that does not like opening in the internet explorer window.
thanks in advance.Hey loranger_guy
Check here http://forums.adobe.com/message/3459238 -
Turn off FTP service via command line
We are running a Mt Lion server. The FTP Service quit working properly. Instead of directing users to the FTP folder specified, users are just sent to the root of the OS drive. We attemped to turn off FTP service in the Server.app, but FTP stays running even when Server.app lists it as off.
Is there a way to turn off FTP via the command line? We can't seem to find it. The instructions we found online for 10.7 don't work. We've tried rebooting the server and repairing permissions but the same problem exists.Finally, tracked it down thanks to the good people at CrushFTP http://crushftp.com
Here is the command for anyone else that may be looking.
sudo -s launchctl load -w /System/Library/LaunchDaemons/ftp.plist
Maybe you are looking for
-
I yesterday installed the latest itunes upgrade to version 11.1.5.5. After doing so my computer no longer recognizes my cd drive Device manager states that windows cannot load the device driver, the device driver may be corrupted or missing. When I h
-
Width and height changes when exporting
When I export a vector design from Illustrator to raster (.jpg in this case), I am given the opportunity to select the "Use Artboards" feature. Once clicked, I assume my dimensions will not change. Here are my selected options: "Use artboards" option
-
Import Open Office .odt into InDesign CS3
Hello– I am working on the layout for a small book and was given several Open Office .odt files containing text and images. Is there any way I can import / open these files in an InDesign document so that the text flows across the pages and is editab
-
created a new textfield, applied an animation to it. Now I am in frame 59, and I want to apply a different animation to textfield. I get this error message. TypeError: Error #1009: Cannot access a property or method of a null object reference. at fl.
-
Web DynPro Adaptive RFC proxies configuration
Hi, When using Adaptive RFC proxies to call BAPIs in my Web DynPro application I need to go to the content management web interface (localhost:50000/webdynpro/welcome) to set them up. How can I automate this configuration for, say, quick deployment o