Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Waterfox 56.0.4 compatibility issue with the add-on Vimperator #428

Closed
JulioJu opened this issue Feb 7, 2018 · 2 comments
Closed

Waterfox 56.0.4 compatibility issue with the add-on Vimperator #428

JulioJu opened this issue Feb 7, 2018 · 2 comments

Comments

@JulioJu
Copy link

JulioJu commented Feb 7, 2018

Hi

As I've explained at vimperator/vimperator-labs#819 (comment), Vimperator doesn't work well with Waterfox 56.0.4. It worked well with with Waterfox 56.0.4.

@devkev says on this comment
« Okay, I had a quick look at this. The patch seems to only affect values set via innerHTML. Vimperator only has 2 places where it uses innerHTML, and both are to set it to an empty value. ».

In Vimperator, it' seems that replace innerHTML by unsafeSetInnerHTML() doesn't resolve the problem.

I've bisected. As we can see below, the first bad bisect is d7f689c.

I've reverted this commit, and Waterfox works well with Vimperator. All plugins who use innerHTML couldn't work, and the new setUnsaveInnerHTML seems not to be used. Maybe, it could be cool to revert this change on the official Waterfox ?

$ git log --graph
* commit d7f689c984bf15259ae5c882ab7d36919f3bbda8 (refs/bisect/bad)
| Author: Alex Kontos <alex@waterfoxproject.org>
| Date:   Wed Jan 31 12:45:10 2018 +0000
|
|     Bug 1432966: Sanitize HTML fragments created for chrome-privileged documents.
|
* commit fd18ba788a2739088272360bf72fb693fdeb022f (refs/bisect/good-fd18ba788a2739088272360bf72fb693fdeb022f)
| Author: Alex Kontos <alex@waterfoxproject.org>
| Date:   Wed Jan 31 12:03:43 2018 +0000
|
|     Update Registry paths.
|

Thanks in advance !

And have good holidays @MrAlex94 :-).

Julio

@MrAlex94
Copy link
Collaborator

I think for now it's best to keep it sanitized. It's an important security change.

@JulioJu
Copy link
Author

JulioJu commented Nov 28, 2018

Fixed thanks vimperator/vimperator-labs#819 (comment) ;-)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants