Is turning off iFrames via about:config browser.frames.enabled;false broken in Firefox 23?

I noticed that Firefox with version 23 removed option to turn OFF JavaScriipt from Tools > Options > Content menu
http://www.extremetech.com/computing/163291-firefox-23-finally-kills-the-blink-tag-removes-ability-to-turn-off-javascript-introduces-new-logo
Recent events when allegedly FBI used JavaScript in iframe to exploit bug in Firefox with intentions to uncover identity of users of TOR network encouraged me to play with security settings a bit.
More about how FBI exploited Firefox bug to execute malitious JavaScript on users computers: https://lists.torproject.org/pipermail/tor-announce/2013-August/000089.html More biased articles can be found in popular media articles. Just google "TOR exploit FBI"
ISSUE:
Symptoms:
I noticed that turning iFrames OFF in about:config > browser.frames.enabled;false seems to not be working as expected. Iframes are still shown and JavaScript in them is executed. Doesnt work even after resterting Firefox.
Testing:
I used this pages to test iFrames:
•https://sites.google.com/site/annuairevin/test-page
•http://www.w3schools.com/tags/tryit.asp?filename=tryhtml_iframe
•http://www.quirksmode.org/iframetest.html
After I turned browser.frames.enabled OFF and restarted I noticed that iFrames are still shown on all 3 pages and JavaScript in them would be executed.
By blocking IFRAMES with NoScript blocking turned ON (you have to turn forbidding IFRAMES on manually in options http://i.imgur.com/7jctoTW.png) I managed to block IFRAMES on google and w3school pages.
!!!Text in iframe "Test page in iframe" on quirksmode test page was still shown even after I have frames turned OFF in about:config and I block all scripts and frames and iframes with NoScript.
If I open same page (http://www.quirksmode.org/iframetest.html) with Opera with iFrames blocked in Preferences, iFrame is not shown at all, browser doesnt even render empty square; but JavaScript in it is executed, if you dont disable JavaScript in Preferences > Advanced.
I didnt test Chrome at all.
Possible things that can cause bug:
•I am using NoScript 2.6.7, I turned it off and on but it is possible that it is overriding Firefox settings in about:config. when you serach about:config for "frames" there are many settings mentioning frames from NoScript and AdBlockPlus.
•AdBlock Plus 2.3.2? Same reason as NoScript.
•Fot the first time I noticed Shield in the address bar with "Firefox has blocked content that isnt secure" bubble. http://i.imgur.com/K4FL65n.png. I dont know how long this feature is implemented or what exactly it does, here are some details: https://support.mozilla.org/en-US/kb/how-does-content-isnt-secure-affect-my-safety?as=u&utm_source=inproduct
P.S. Just small remark. If that is true: "Finally, Firefox 23 removes the option to disable JavaScript from the Options pane — and if you had JavaScript turned off, it has been turned back on." There should be some warning when Firefox is updated that JS was turned ON. I think that for me FF updated silently without any messages. OR maybe I blatantly closed some windows, i dont remember well.

The documentation I find on browser.frames.enabled is very vague, but I can't see that it does anything currently. Is this a feature you used successfully in an earlier version?
The Mixed [Active] Content Blocker was turned on by default in Firefox 23. That would explain the shield icon. Not sure whether implementing that might have changed how iframes are handled.

Similar Messages

  • In the URL bar, type about:config Type geo.enabled Double click on the geo.enabled preference Location-Aware Browsing is now disabled, does not work How do you turn this Off!

    In the URL bar, type about:config
    Type geo.enabled
    Double click on the geo.enabled preference
    Location-Aware Browsing is now disabled
    Google will not remove their location aware feature saying it is picked up by the location aware feature in my firefox browser and referred me to your like where I found the above to disable this feature. It just sent me to a yahoo search page. How do you disable this I want to use US Google not Google.ua and you don't need this to help me locate anything in the Ukraine. When I take my laptop with me on trips does my firefox local change wherever I go?

    See:
    * http://www.mozilla.com/firefox/geolocation/
    *http://browserspy.dk/geolocation.php

  • How can I turn off charging via usb of my iphone 4s when I connect it to my computer?

    how can I turn off charging via usb of my iphone 4s when I connect it to my computer?

    You cannot.
    Why would you want such a thing?

  • I can't change ff start page. i edited options menu. i changed about:config /browser.starter.homepage but ff still opens with start page. i don't want this.

    everytime i start firefox it opens on firefox start page. i don't want this. i want my own home page. i have changed it several times in 'options-general-when firefox starts...' but alas to no avail..it still starts up with the firefox start page. i have also gone to 'about:config' and changed the value of 'browser.startup.homepage' to my homepage. i restarted firefox and it worked...but just the once. the next time i opened firefox it started up once again with the firefox homepage. i have done scans, i have tried to remove the hometab with various anti virus/anti malware programms.. i have sieved through my registry..it doesn't matter what i do.. firefox starts up with it's own homepage which i do not want. please can you help?.. it's driving me nuts. i don't really want to have to reinstall firefox. thanks in advance x ps. firefox also keeps crashing on me :(

    ohhh right!! i have been educating myself as i didn't understand what this user.agent.override.pref meant .. now i get it.. yes i will keep an eye on that when firefox next updates...at the moment everything is running smoothly so i'm going to leave it as it is for now. but at least now i know what it all means.. ahh you learn something new every day :-) thanks everyone x

  • Firefox 4 with close tab x on far right side? About:config browser.tabs.closeButtons 3 ?

    in FF 3 I had the close tab button on the far right side with the
    browser.tabs.closeButtons config to 3.
    This doesn't work in FF4 anymore, what are my options?
    So far I stay on 3.6 as this is a feature I really like to have.
    Thanks
    Tilo

    I'm the opposite, I like having the close button right on each tab - it's more clear to me which one I'm closing then.
    To do that, about:config. Set browser.tabs.closeButtons to value 1.

  • Command to turn off Bluetooth via ARD

    I'd like to turn off Bluetooth and Airport via ARD on all of my Macs (all running Leopard) that don't need them.
    I can do this for Airport using networksetup -setairportpower off, but I can't find a similar command for Bluetooth. I don't really want to completely disable it so I'd like to leave the kernel extensions intact, just turn it off. Does such a command exist?

    you can install bueutil on all macs and use that.
    http://www.frederikseiffert.de/blueutil/
    I don't know any other way to turn bluetooth off/on from command line.

  • Turn off wireless via Windows 7, not opening Elitebook

    I know that you can touch the backlit wireless icon beneath the screen to turn WiFi on/off.  However, my notebook is often in a docking station, lid down (since I use a big external screen).  Opening the lid causes the screen to flip, so I don't want to open and close the screen just to turn off WiFi.  Is there a way to turn off WiFi by navigating to some switching on Windows 7?

    Then I suggest that you turn the wireless off before you dock your elitebook.
    It is five bars.
    This is a Windows 7 Desktop. Left-click on the wireless icon to get this to appear. A right-click will only produce a menu with the troubleshoot and Open Network and Sharing Center options
    ****Please click on Accept As Solution if a suggestion solves your problem. It helps others facing the same problem to find a solution easily****
    2015 Microsoft MVP - Windows Experience Consumer

  • Why does my Satellite C655D-S5300 turn off randomly after about 45 minutes to 1.5 hours

    Was wondering why my laptop turns off randomly for no reason.  It does this even if no battery is connected and the AC adapter is connected.  It starts right up again if I press the power button but only lasts for an hour or so then shuts down again?  When it starts I do hear the fan going and the system works just fine until it randomly shuts down.  Upon restarting the usual windows error indicated improper shut down happened.  Could it be a bios problem or a virus?
    Solved!
    Go to Solution.

    Hi Peter,
    Well, I finally gave up and took it into a professional repair place who simply updated the BIOS and that solved the problem.  Runs like a champ now.  I should have checked that before taking it in...would have been a quick fix and saved
    $100.  Oh well, thanks for the reply.
    Jordan

  • How to disable location, this; In the URL bar, type about:config Type geo.enabled Double click on the geo.enabled preference Location-Aware Browsing is now disabled...makes no sense

    please help, I want to disable location aware browsing, thanks

    See:
    * http://www.mozilla.com/firefox/geolocation/
    *http://browserspy.dk/geolocation.php

  • Turn off Office Documents opening in Browser

    I've gone into Site Settings/Advanced Settings and set it so that Office documents will open only in the client application and NOT in the Browser, but it still tries to open them in the browser.
    What am I missing?

    Hi Elmo,
    Pls check the below
    Navigate to site collection feature and search for "Open Documents
    in Client Applications by Default" and activate the feature.
    if you want to change only for particular document library then from document library settings ->General settings-> advance settings->under Opening
    Documents in the Browser section->Open in
    the client application.
    Please remember to click 'Mark as Answer' on the answer if it helps you

  • How to turn off marketing texts about Smart talk?

    I seem to constantly get texts from BT about using my mobile for using smarttalk to make calls
    It says to text 61998 with Stop, to make them stop, but unfortunatly, the texts never go through, so the texts keep on coming.
    Anyone know of a way to stop these freaking things?

    Ah I think it's because the iphone keeps putting a space after the second digit.

  • Turn off bluetooth via applescript when power is disconnected

    Hello all
    I've been fallowing this older thread here:
    http://discussions.apple.com/thread.jspa?messageID=2109999
    I've followed the instructions of the post,but when I run the script I get this
    error:
    Usage: grep [OPTION]... PATTERN [FILE]...
    Try `grep --help' for more information.
    sh: line 1: Applications: command not found
    Does anyone know if there is an updated version of this type of script or
    if this can be corrected?
    Thanks

    Hello
    I'm afraid that the code by Michael Henley in the referred thread has been altered by the fora software introduced in 2007. Perhaps the ac_power() handler should be read as -
    to ac_power()
    (do shell script "pmset -g | grep \\*") starts with "AC Power"
    end ac_power
    Good luck,
    H
    PS. Please copy code from this web page, not from subscribed email text, for I escaped some character for posting; namely \.

  • My Flexible space bars in the toolbar keep deleting themselves off the top of my browser when i close and open firefox

    I use the flexible space bar to center up my: Home, refresh & cancel buttons to the middle of my browser. but when i close and then open Firefox they automatically jump the the left side of the screen again next to the back and forward buttons. here is a snip shot of what an where i mean: http://oi53.tinypic.com/kd7by8.jpg

    Whoa you guys are fast at responding even though you have alot of new requests: Sorry, i'll give you a better shot this time at the bottom, but first i need to talk about the email you sent me.
    Your link to this question that was given in my email takes you to a blank Firefox page if you are not logged in, Please make a modification to the page to tell users to sign in. this is the web address given to me: https://support.mozilla.com/questions/758231#answer-110012 but i had to delete the *#answer-110012* at the end of the address to connect to this quiry, where it then asked me to sign in.
    Here are better screen shots: Here is where i like the three icons to be (circled in blue): http://oi54.tinypic.com/11bucev.jpg but every time i open Firefox they go here by themselves: http://oi54.tinypic.com/6eekus.jpg

  • Turn off display pdf in browser

    is there a registry key that we can modify to turn off the diplay pdf in browser check box? we have a application that does not like opening in the internet explorer window.
    thanks in advance.

    Hey loranger_guy
    Check here http://forums.adobe.com/message/3459238

  • Turn off FTP service via command line

    We are running a Mt Lion server.  The FTP Service quit working properly.  Instead of directing users to the FTP folder specified, users are just sent to the root of the OS drive.  We attemped to turn off FTP service in the Server.app, but FTP stays running even when Server.app lists it as off. 
    Is there a way to turn off FTP via the command line?   We can't seem to find it. The instructions we found online for 10.7 don't work.  We've tried rebooting the server and repairing permissions but the same problem exists.

    Finally, tracked it down thanks to the good people at CrushFTP http://crushftp.com
    Here is the command for anyone else that may be looking.
    sudo -s launchctl load -w /System/Library/LaunchDaemons/ftp.plist

Maybe you are looking for