bug-gnuzilla
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: What triggers "A script modified the host part ..." warning?


From: novakyu
Subject: Re: What triggers "A script modified the host part ..." warning?
Date: Thu, 10 Jan 2008 00:13:45 -0800

Thanks for the response. The questions I still have are:

On Jan 9, 2008 11:38 PM, Giuseppe Scrivano <address@hidden> wrote:
> novakyu <address@hidden> writes:
...
> > what triggers the warning, "A script modified the host part in a link
> > in the page. This can cause serious privacy problems." ? This warning
...
> it happens when a script modify the host part in an URL.  For example
> in the page there is present a link to a website
> http://another.web.site.com/ (and this is what you see in the status
> bar) but immediately after you click on it a script modify it to point
> to another site and in this way, track your click.

So, when it says "A script modified the host part in a link in the
page. This can cause serious privacy problems", does that mean:

1) The link that I clicked to get to the website was such a redirect, or
2) IceCat looks through the page looking for Javascript codes that do
what you described?

The thing is, this behavior seems to happen more often than I would
expect (I certainly didn't expect it while browsing my own website,
since it doesn't have any Javascripts and any dynamic processing (some
shtml and Python) is done on server side), and if it's case (1), I can
imagine that happening if I follow wrong links to my website, but not
if it's case (2).

It would be very nice to see what feature/code on the website
triggered it so that I can fix it (if possible), or if it's not
something that should have triggered the warning, file a proper bug
report for IceCat.

Regards,

Andrzej

P.S. The behavior doesn't seem very reproducible. I just tried loading
my website again, and this time, it doesn't show the warning. I tried
visiting through other websites, such as Google (but seeing your
explanation's Google's click-tracking shouldn't trigger this, since
they don't try to hide the fact that they redirect you through them)
or Facebook, but no luck.




reply via email to

[Prev in Thread] Current Thread [Next in Thread]