Closed
Bug 969897
Opened 11 years ago
Closed 10 years ago
Citibank websites make Firefox spam this to the terminal: "No permission to use the keyboard API for https://www.accountonline.com " (from enumerating the properties of 'navigator')
Categories
(Core :: DOM: Core & HTML, defect)
Tracking
()
RESOLVED
DUPLICATE
of bug 986992
People
(Reporter: dholbert, Unassigned)
References
()
Details
Attachments
(1 file)
(deleted),
text/html
|
Details |
STR:
0. Start Firefox (nightly or release) from the terminal.
1. Visit https://www.accountonline.com/cards/svc/LoginGet.do
2. Reload a few times [optional]
ACTUAL RESULTS: For each load, this is printed:
No permission to use the keyboard API for https://www.accountonline.com
EXPECTED RESULTS: Nothing printed to terminal for each pageload. This error message perhaps belongs in the Error Console (it's not printed there right now), but definitely not on the terminal, in release builds.
DISCUSSION:
The site isn't actually trying to *use* the keyboard API -- they just have some javascript code that enumerates the properties of 'navigator' and tests each one to see whether it's an object or a string. Quoting the source file:
************
bc+=gc(navigator,'n.',citem);
[SNIP]
function gc(c, cn, ci)
{
var s="";
for (i in c)
{
if (typeof(c[i])!="function" && typeof(c[i])!="object")
************
Source: https://www.accountonline.com/cards/svc/js/util/bsa_client_src.js
I've attached a reduced testcase attached which does something similar and also triggers this.
Setting as blocking bug 838308 which (it looks like) added this message.
Reporter | ||
Updated•11 years ago
|
Summary: Citibank websites trigger "No permission to use the keyboard API for https://www.accountonline.com" spammed to my console, due to enumerating properties of 'navigator' → Citibank websites make Firefox spam this to the terminal: "No permission to use the keyboard API for https://www.accountonline.com" (from enumerating the properties of 'navigator')
Reporter | ||
Comment 1•11 years ago
|
||
FWIW, I've tested with recent Nightly:
30.0a1 (2014-02-07)
and Firefox 26 release:
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:26.0) Gecko/20100101 Firefox/26.0
Reporter | ||
Comment 2•11 years ago
|
||
Fabrice, should we just remove this message? or is there a better place (e.g. error console) where we can report it?
Flags: needinfo?(fabrice)
Why does mozKeyboard exist at all on desktop?
Comment 4•11 years ago
|
||
(In reply to Daniel Holbert [:dholbert] from comment #2)
> Fabrice, should we just remove this message? or is there a better place
> (e.g. error console) where we can report it?
Yep, we dump() at https://mxr.mozilla.org/mozilla-central/source/dom/inputmethod/MozKeyboard.js#48 - I'm fine with removing it totally.
(In reply to Kyle Huey [:khuey] (khuey@mozilla.com) from comment #3)
> Why does mozKeyboard exist at all on desktop?
The only reason I can think of is to let gaia devs use firefox desktop as a dev environment.
Flags: needinfo?(fabrice)
Comment 5•11 years ago
|
||
(In reply to comment #4)
> (In reply to Kyle Huey [:khuey] (khuey@mozilla.com) from comment #3)
> > Why does mozKeyboard exist at all on desktop?
>
> The only reason I can think of is to let gaia devs use firefox desktop as a dev
> environment.
That's not a good reason. I filed bug 970044 on this.
Updated•10 years ago
|
Status: NEW → RESOLVED
Closed: 10 years ago
Resolution: --- → DUPLICATE
Assignee | ||
Updated•6 years ago
|
Component: DOM → DOM: Core & HTML
You need to log in
before you can comment on or make changes to this bug.
Description
•