6 ms·
Unable to reproduce this on Chrome 118. I just ended up with an untitled bookmark. Still interesting to look at Chromium's source to see that they have unit te
by arshxyz 3y ago
Unable to reproduce this on Chrome 118. I just ended up with an untitled bookmark.
Still interesting to look at Chromium's source to see that they have unit tests for bookmarklets [1]. Also looks like people "frequently" report running JS from bookmarks as an XSS vulnerability [2]
[1] https://github.com/chromium/chromium/blob/0acce829e996f8387c0bd160eaeaf29054e93d27/content/browser/renderer_host/render_view_host_unittest.cc#L157 https://github.com/chromium/chromium/blob/0acce829e996f8387c...
[2] https://github.com/chromium/chromium/blob/0acce829e996f8387c0bd160eaeaf29054e93d27/docs/security/faq.md?plain=1#L420-L424 https://github.com/chromium/chromium/blob/0acce829e996f8387c...
- gabrielsroka 3y agoDid you drag and drop it? Which OS? It works for me on Windows.
- gabrielsroka 3y agoIt doesn't seem to work on Chromium on Ubuntu. I don't have a Mac to try it on, perhaps someone else can try it.
- arshxyz 3y agoDoesn't work on macOS for me. Huh.