Re: JavaScript in iframe allowed

[Ian Kelling]

takuwan@libertymail.net writes:

> Hi all,
>
> I noticed that JS loaded from within an <iframe> is transparent to LibreJS:
> there’s no report of it in the extension tab (neither accepted nor blocked).
>
> Here is an example with an embedded OpenStreetMap map at the bottom of the 
> page:
> https://zazenmarseille.org
>
> If I follow the link bellow the map to open it in the OSM website, the script 
> is
> blocked and the map can’t be displayed because it’s not free. Why is it not
> blocked directly in the <iframe>?

Looks like a bug to me. Thanks for reporting.

-- 
Ian Kelling | Senior Systems Administrator, Free Software Foundation
GPG Key: B125 F60B 7B28 7FF6 A2B7  DF8F 170A F0E2 9542 95DF
https://fsf.org | https://gnu.org