Closed Bug 969897 Opened 11 years ago Closed 10 years ago

Citibank websites make Firefox spam this to the terminal: "No permission to use the keyboard API for https://www.accountonline.com" (from enumerating the properties of 'navigator')

Categories

(Core :: DOM: Core & HTML, defect)

x86_64
Linux
defect
Not set
normal

Tracking

()

RESOLVED DUPLICATE of bug 986992

People

(Reporter: dholbert, Unassigned)

References

()

Details

Attachments

(1 file)

Attached file foo.html (deleted) —
STR: 0. Start Firefox (nightly or release) from the terminal. 1. Visit https://www.accountonline.com/cards/svc/LoginGet.do 2. Reload a few times [optional] ACTUAL RESULTS: For each load, this is printed: No permission to use the keyboard API for https://www.accountonline.com EXPECTED RESULTS: Nothing printed to terminal for each pageload. This error message perhaps belongs in the Error Console (it's not printed there right now), but definitely not on the terminal, in release builds. DISCUSSION: The site isn't actually trying to *use* the keyboard API -- they just have some javascript code that enumerates the properties of 'navigator' and tests each one to see whether it's an object or a string. Quoting the source file: ************ bc+=gc(navigator,'n.',citem); [SNIP] function gc(c, cn, ci) { var s=""; for (i in c) { if (typeof(c[i])!="function" && typeof(c[i])!="object") ************ Source: https://www.accountonline.com/cards/svc/js/util/bsa_client_src.js I've attached a reduced testcase attached which does something similar and also triggers this. Setting as blocking bug 838308 which (it looks like) added this message.
Summary: Citibank websites trigger "No permission to use the keyboard API for https://www.accountonline.com" spammed to my console, due to enumerating properties of 'navigator' → Citibank websites make Firefox spam this to the terminal: "No permission to use the keyboard API for https://www.accountonline.com" (from enumerating the properties of 'navigator')
FWIW, I've tested with recent Nightly: 30.0a1 (2014-02-07) and Firefox 26 release: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:26.0) Gecko/20100101 Firefox/26.0
Fabrice, should we just remove this message? or is there a better place (e.g. error console) where we can report it?
Flags: needinfo?(fabrice)
Why does mozKeyboard exist at all on desktop?
(In reply to Daniel Holbert [:dholbert] from comment #2) > Fabrice, should we just remove this message? or is there a better place > (e.g. error console) where we can report it? Yep, we dump() at https://mxr.mozilla.org/mozilla-central/source/dom/inputmethod/MozKeyboard.js#48 - I'm fine with removing it totally. (In reply to Kyle Huey [:khuey] (khuey@mozilla.com) from comment #3) > Why does mozKeyboard exist at all on desktop? The only reason I can think of is to let gaia devs use firefox desktop as a dev environment.
Flags: needinfo?(fabrice)
(In reply to comment #4) > (In reply to Kyle Huey [:khuey] (khuey@mozilla.com) from comment #3) > > Why does mozKeyboard exist at all on desktop? > > The only reason I can think of is to let gaia devs use firefox desktop as a dev > environment. That's not a good reason. I filed bug 970044 on this.
Status: NEW → RESOLVED
Closed: 10 years ago
Resolution: --- → DUPLICATE
Component: DOM → DOM: Core & HTML
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: