Skip to content
This repository has been archived by the owner on Dec 11, 2019. It is now read-only.

Javascript is not disabled on local pages #14717

Closed
tildelowengrimm opened this issue Jul 11, 2018 · 1 comment
Closed

Javascript is not disabled on local pages #14717

tildelowengrimm opened this issue Jul 11, 2018 · 1 comment
Assignees
@diracdeltas
Labels
sec-low security

Comments

@tildelowengrimm
Copy link

On locally-served pages, Brave executed inline Javascript even when shields is set to block JS.

Test by serving the following HTML from a local webserver (ex: with python -m SimpleHTTPServer 8000) and visiting the page in Brave.

<!DOCTYPE html>
<body id="htmlBodyId">
  <center>This message displayed if javascript is disabled.</center>
  <script>
    console.log( 'This message displayed if javascript is enabled.' );
    document.getElementById( 'htmlBodyId').innerHTML = '<center>This message displayed if javascript is enabled.</center>'
  </script>
</body>
</html>
@diracdeltas diracdeltas added this to the 0.23.x Release 4 milestone Jul 17, 2018
@diracdeltas diracdeltas self-assigned this Jul 17, 2018
@diracdeltas
Copy link
Member

this turned out to be part of #15232

@bsclifton bsclifton removed this from the Triage Backlog milestone Oct 19, 2018
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees

@diracdeltas diracdeltas

Labels
sec-low security
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@diracdeltas @tildelowengrimm @bsclifton