4:39 p.m.
I've just managed to work out why at least one of the pages I've
encountered displays as completely blank in NetSurf, despite appearing
to have a good deal of basic HTML content in addition to all its scripts
etc:
https://www.chowhound.com/food-news/194075/how-to-use-bearnaise-sauce-on-...
contains the header line
<STYLE id="antiClickjack">body{display:none
!important;}</STYLE>
which has the effect of hiding the entire content of the page.
Apparently this is intended as a means of preventing pages from being
displayed in iframes, and is assumed to be overridden by a piece of
JavaScript elsewhere in the page source which will remove the display:
none if the current window is the topmost element. However, this
doesn't work at all in NetSurf's JavaScript support (even if the browser
window *is* top of the stack, which in the case of a RISC OS desktop it
often isn't!)
--
Harriet Bazley == Loyaulte me lie ==
The fact that you're paranoid.... doesn't mean they're NOT out to get you.
5:18 p.m.
In article <0f08bf2259.harriet(a)bazleyfamily.co.uk>,
Harriet Bazley <lists(a)bazleyfamily.co.uk> wrote:
[Snip]
<STYLE id="antiClickjack">body{display:none
!important;}</STYLE>
which has the effect of hiding the entire content of the page.
[Snip]
Great find, thank you.
B
--
_____________________________________________________________________
Brian Jordan
RISC OS 5.28 on Raspberry Pi
_____________________________________________________________________
6:08 p.m.
On 25 Apr, brian.jordan9(a)btinternet.com wrote:
In article <0f08bf2259.harriet(a)bazleyfamily.co.uk>,
Harriet Bazley <lists(a)bazleyfamily.co.uk> wrote:
[Snip]
> <STYLE
id="antiClickjack">body{display:none !important;}</STYLE>
> which has the effect of hiding the entire content of the page.
[Snip]
Great find, thank you.
B
My interest piqued I have been looking at this and discovered (I say
'discovered' while suspecting this is well known) that using NetSurf's
Full save facility produces a page which can be opened. The layout is
something of a dog's breakfast and all pictures are pixellated but the
links I have tried so far work and lead to nicely laid out pages which
NetSurf is happy with.
Stuffed Eggs Béarnaise anyone?
'If a web page fails to render in Netsurf try a full save' now added to
my 'Things to Try' notes
NetSurf test builds 5278 and 5286
B
--
_____________________________________________________________________
Brian Jordan
RISC OS 5.28 on Raspberry Pi
_____________________________________________________________________
7:33 p.m.
On 25 Apr 2021 as I do recall,
Brian Jordan wrote:
On 25 Apr, brian.jordan9(a)btinternet.com wrote:
> In article <0f08bf2259.harriet(a)bazleyfamily.co.uk>,
> Harriet Bazley <lists(a)bazleyfamily.co.uk> wrote:
> [Snip]
> > <STYLE id="antiClickjack">body{display:none
!important;}</STYLE>
> > which has the effect of hiding the entire content of the page.
> [Snip]
> Great find, thank you.
> B
My interest piqued I have been looking at this and discovered (I say
'discovered' while suspecting this is well known) that using NetSurf's
Full save facility produces a page which can be opened.
That's interesting - the 'index' page in the Full save is actually
missing the offending line. NetSurf has somehow stripped it out (along
with rewriting a few other things, e.g. wrapping multi-line
class definitions onto a single line and apparently changing the case of
the <script> tags).
The original source HTML reads:
<script>
// for testing instart:
// window.I11C = {};
// window.I11C.Morph = 1;
</script>
<style id="antiClickjack">body{display:none
!important;}</style>
<script type="text/javascript">
if (self === top) {
var antiClickjack = document.getElementById("antiClickjack");
antiClickjack.parentNode.removeChild(antiClickjack);
} else {
top.location = self.location;
}
and this gets rewritten during the Full Save process to
<SCRIPT>
// for testing instart:
// window.I11C = {};
// window.I11C.Morph = 1;
</SCRIPT>
<SCRIPT type="text/javascript">
if (self === top) {
var antiClickjack = document.getElementById("antiClickjack");
antiClickjack.parentNode.removeChild(antiClickjack);
} else {
top.location = self.location;
}
I'm not clear why this would happen while parsing the page header, so
the fact that it happens to cause the page to render as visible may be
just a massive coincidence...!
--
Harriet Bazley == Loyaulte me lie ==
Positive: Mistaken at the top of one's voice.
949
days inactive
949
days old
netsurf-users@netsurf-browser.org
3 comments
2 participants
participants (2)
-
Brian Jordan -
Harriet Bazley