Code from other sites shows up in my page.- Possible security Issue
I am working on a webpage behind a firewall. I use both the firebug script debugger for firefox and the IE script debugger for IE. If I go to another website (cnn or reddit), then come back to my test page, which has an error in the jquery dropdown code I wrote, instead of getting the notice that there is an error in jquery-1.8.3.js, I get a notice that there is an error in the code from the previous page. For instance http://www.redditstatic.com/reddit-init.en.IY9Adp1eOs.js shows up in the error console when I am on my own test server. Since the code on my page is trying to run someone else's code it seems to me that this could be a major security issue. This may be hard to understand. I have screen shots that I will try to load. Thanks, Brita ps. When I debug in IE. I only show the expected jquery error.
Chosen solution
I only rarely use Firebug, so I haven't observed this myself. Or just ignored it. Hopefully someone else here or on the Firebug list/forum can address that.
Read this answer in context 👍 1All Replies (6)
I know that Firefox's own Error Console doesn't segregate errors and warnings by site; it's just a chronological list. Is it possible that Firebug similarly is displaying errors generated by other sites along with the errors from your site? You might try the Firebug discussion list for clarification: https://getfirebug.com/community
You can check this with the Web Console (Firefox/Tools > Web Developer;Ctrl+Shift+K).
This console should only display messages from the tab in which you have opened it.
I tried going to reddit, browsing, then coming to the start page of my web site and navigating to new page (4 clicks). During all this time the error console is empty. When I change the value of the dropdown menu, then the error appears. So it looks like the .js on my page is causing an error with this other code.
I set the header for no-cache, but it didn't make any difference.
Can someone please help me with this?
Thanks, Brita
Hi Brita, could you compare the timestamps in Firefox's Error Console (Ctrl+Shift+j) to see whether Firebug is just slow in displaying the errors?
Hi jscher, Thanks for your reply. When I click the Ctrl+Shift+j I get a current timestamp, but is shows the error in my copy of jquery-1.9.1.js. (this is what I would expect) Someone on another forum suggested that this could b a glitch in firebug that is pulling strange data when trying to find the error.
Have you, or anyone else out there heard of this happening? Brita
Chosen Solution
I only rarely use Firebug, so I haven't observed this myself. Or just ignored it. Hopefully someone else here or on the Firebug list/forum can address that.