Skip to content

Commit

Permalink
Don't run user scripts on data URIs.
Browse files Browse the repository at this point in the history
Firefox contains data URIs with chrome privileges (e.g. Scratchpad),
so for security reasons user scripts should never be allowed to run
on data URIs.

Fixes #1767.
  • Loading branch information
Ventero authored and arantius committed Jul 18, 2013
1 parent 2f4f6c2 commit 3f4a83e
Showing 1 changed file with 0 additions and 1 deletion.
1 change: 0 additions & 1 deletion modules/util/isGreasemonkeyable.js
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,6 @@ function isGreasemonkeyable(url) {
case "http":
case "https":
case "ftp":
case "data":
return true;
case "about":
// Always allow "about:blank".
Expand Down

0 comments on commit 3f4a83e

Please sign in to comment.