From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0.migadu.com ([2001:41d0:403:58f0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms13.migadu.com with LMTPS id MLiRIV6JbWeeJwAAqHPOHw:P1 (envelope-from ) for ; Thu, 26 Dec 2024 16:50:38 +0000 Received: from aspmx1.migadu.com ([2001:41d0:403:58f0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0.migadu.com with LMTPS id MLiRIV6JbWeeJwAAqHPOHw (envelope-from ) for ; Thu, 26 Dec 2024 17:50:38 +0100 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20230601 header.b="GOVcvb/D"; spf=pass (aspmx1.migadu.com: domain of "emacs-orgmode-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="emacs-orgmode-bounces+larch=yhetil.org@gnu.org"; dmarc=fail reason="SPF not aligned (relaxed)" header.from=gmail.com (policy=none) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1735231838; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=u5nIWNaTOQ6wvVyM/NBa9DkOqKQh2ngi3rSM2AhUoWc=; b=AGmGniBXPjnBkOwvuIc89t7n1GFW5EhjZ4tJttGoNX52zYws+vOkS7paTyLtWZy7BApWhh YgOew6fONdt/EIe5ykSBVJwZAE0frLq0zTyia3AAFl2rTiNkn/RfSHSKlUzInWMOp9ZHof RInB46YcZQ/UBNZLOtC+j2wW6SNwdQU4q/Ir9xt0ZZH4dhhggF0VRwTPILXxB63ETdWGi9 Vc8Kg7ZKfDtYMPKqsN/dicFGitQNjKqLp0UsihKjJdBTvw0oiw0nTfDJOZTIMKdkUrOelt Z6TMLcZjFGwIJEoU2dclU4LMiruAuqYu3TdnjzvFdMxzxHZIsk2FCJLFMFW0Nw== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20230601 header.b="GOVcvb/D"; spf=pass (aspmx1.migadu.com: domain of "emacs-orgmode-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="emacs-orgmode-bounces+larch=yhetil.org@gnu.org"; dmarc=fail reason="SPF not aligned (relaxed)" header.from=gmail.com (policy=none) ARC-Seal: i=1; s=key1; d=yhetil.org; t=1735231838; a=rsa-sha256; cv=none; b=ScCFW4FvcZ+Qp2MyMO5pXlSfMbTmwjz6JqydOhVwP6FgTL9fyOt2i1f/a5d6GeX5NdwGhb ykT4DphtS9O9bRLOd6twcz3GIoRIJXbCBRwFI//WPqOwc8Il/q7Iu5bulQUthHSYu0OBlz u7yPs2x+zJ/pUNyQhN1ChgnVEic2tgYTK4im/i1ZtwesJHeq4XCe/X+TBYkPQKcGNuTcwJ 3vyVxIKPzKxhhpeoOsTh/c/ufGiByN7VDucBT2zMEtqwxOdw9B8FejKUDyqHf605U5bA0R XagYrtTweqiYUHNQHLSFKlVSmuDI1f4hM/VujNb9P+6s59LOqPCznU3MCurDig== Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 292C88F810 for ; Thu, 26 Dec 2024 17:50:38 +0100 (CET) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1tQr3U-0002nL-CL; Thu, 26 Dec 2024 11:49:48 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1tQr3T-0002n2-LR for emacs-orgmode@gnu.org; Thu, 26 Dec 2024 11:49:47 -0500 Received: from mail-lf1-x12b.google.com ([2a00:1450:4864:20::12b]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1tQr3Q-0007hq-1i for emacs-orgmode@gnu.org; Thu, 26 Dec 2024 11:49:45 -0500 Received: by mail-lf1-x12b.google.com with SMTP id 2adb3069b0e04-53ff1f7caaeso7205623e87.0 for ; Thu, 26 Dec 2024 08:49:43 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1735231781; x=1735836581; darn=gnu.org; h=content-transfer-encoding:in-reply-to:mail-followup-to:from :content-language:references:to:subject:user-agent:mime-version:date :message-id:sender:from:to:cc:subject:date:message-id:reply-to; bh=u5nIWNaTOQ6wvVyM/NBa9DkOqKQh2ngi3rSM2AhUoWc=; b=GOVcvb/DEn86Um+0j0HPiPd1Vs2M7ZGVGtxeonuy9K2qX3YqAL8ZlrVEa5iPqi2Nac 8LOEDTLCd8LdO0QsIq6LLQn5zwY753tMuEeJr+aNNdmgeuDlc4YMIIH+cKw6vhoaLDwk GuIvOoWLLenxTi1yzwgjiYdLpXVyZu+2QcAkhtC4K3lkU0LdlF4joI0DBIuHwP79fTQc Vu+5a7hVcpdKdK5q58n80TmndQlHz8stDolmH6w9LtLO31LWyvJmtwFdMsP5zhS+juui oOI1+B/K4nTBx5iA71x4dvLCo/2dnNjMChgUav3xJDbSQsWCrs+gtkoFsmR7tdN7TMDT 4/gw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1735231781; x=1735836581; h=content-transfer-encoding:in-reply-to:mail-followup-to:from :content-language:references:to:subject:user-agent:mime-version:date :message-id:sender:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=u5nIWNaTOQ6wvVyM/NBa9DkOqKQh2ngi3rSM2AhUoWc=; b=MpQZTo/RJWm1wjwyuBhs0Po73ZuFIG+BDtbRTcz+8vSTI1kD+pwvAmxR8lxvaZUpaN Kpnq870pugzgU61Um8TlCcPqHofrhrp2iE08MHHiMwSJ33fdcgcLDJaraZJOKv5K2heZ jJk/8uuEx3kOVHQX/03hq6axsyL+dA4b65Rm70k/Iy37tyqpZ+HY8Adh6yntGyENFmSj IZ8sY0eb/PH53EKVWlV9qh3rR3JIKuG47tkbt4TCv6K9p9TvkoEQsUKkt/WgmklEcTft sv3ciKhvH5aSU4cVyjk69OIhC7gpHx2FDxlcnlCUyoyasxH/oFbol4JGmXsn9A0QnpKo 0arQ== X-Forwarded-Encrypted: i=1; AJvYcCXgei/MFS0i+z4U3hI9zdJQql9CaYTfn/m1YENh87QMWytQpGngDki+WhBByija86CTCVKUV0jq6HyAq3H0@gnu.org X-Gm-Message-State: AOJu0YxnaB4LYZ8UAW1u3t4kIcNSU3KvUv21bMqyRAkHXSEJDAhSTyqa W3dSMHWrBqXCurMw/qvSqLVPtNS/RagEkK94SmFUAYAC+WTN9ia5 X-Gm-Gg: ASbGnctYeY11f80XfcXPnDufokKqFTXYYOGBXfzoJmu2cpSunkt9rJ0t/XtZaHHyHC1 rajydAP9mlnOQl/jP+tQK2ejWo04xuGpTXtA05yOwZV+jECVTLfb94fvgNpku9LlLeeun9Cu9m4 KqFoSO4LaWx5J5PtXwMjR5r6K7o7yI2ZL/+UF4mwZVYdn+DJNBjWZk/84i9TJuJFaOKy62s/E0H my+pXBv3IRfpCJLujAfF9UySoxZjR6V1KfMO1D+P4tt1e0Fw3BlFOWmUAUe7Afei1vf/1t/LHad 2rI= X-Google-Smtp-Source: AGHT+IEQ0LoU7OI4Lr+w+bfCqoEdSn72bPtLP4hRi7Kq1shORYAB9Mf1llm+DjFpAbTQQaa7yyCOfg== X-Received: by 2002:a05:6512:3f26:b0:53e:39b7:54a3 with SMTP id 2adb3069b0e04-5422953ac26mr7433368e87.24.1735231781156; Thu, 26 Dec 2024 08:49:41 -0800 (PST) Received: from [192.168.1.149] (nat-0-0.nsk.sibset.net. [5.44.169.188]) by smtp.googlemail.com with ESMTPSA id 2adb3069b0e04-542236006b0sm2209743e87.106.2024.12.26.08.49.40 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Thu, 26 Dec 2024 08:49:40 -0800 (PST) Message-ID: Date: Thu, 26 Dec 2024 23:49:39 +0700 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [BUG] Org-protocol bookmarklets in Firefox behaving badly after recent upgrade [9.6.15 (release_9.6.15 @ /usr/share/emacs/29.4/lisp/org/)] To: Rehan Deen , emacs-orgmode@gnu.org References: <87pllx7219.fsf@gmail.com> Content-Language: en-US, ru-RU From: Max Nikulin Mail-Followup-To: Rehan Deen , emacs-orgmode@gnu.org In-Reply-To: <87pllx7219.fsf@gmail.com> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Received-SPF: pass client-ip=2a00:1450:4864:20::12b; envelope-from=manikulin@gmail.com; helo=mail-lf1-x12b.google.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: emacs-orgmode@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "General discussions about Org-mode." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-orgmode-bounces+larch=yhetil.org@gnu.org Sender: emacs-orgmode-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US X-Migadu-Scanner: mx11.migadu.com X-Migadu-Spam-Score: 2.79 X-Spam-Score: 2.79 X-Migadu-Queue-Id: 292C88F810 X-TUID: 9eL24aiwIT10 On 12/12/2024 15:12, Rehan Deen wrote: > on the webpage https://orgmode.org/, Emacs is able to capture the link > and title ("Org mode for GNU Emacs") as desired, but the browser > displays a blank page with the following text: > > org-protocol://store-link?url=https%3A%2F%2Forgmode.org%2F&title=Org+mode+for+GNU+Emacs > > I have to hit refresh to redisplay the original webpage. Have you considered reporting a bug to Firefox? I have tried year old versions of Chromium and Firefox and have realized that e.g. javascript:a="test" consistently replaces document content. Chromium still discards expression value in the case of assignment to "location". So the change is specific to Firefox (including ESR channel) and perhaps an unintentional side effect of another fix, likely a security one. > Interestingly, the `org-capture` extension for Firefox from > https://github.com/sprig/org-capture-extension continues to work without > producing this issue (i.e. the link is captured and the webpage > continues to be displayed properly). So Firefox and Chromium behavior content scripts has diverged. Chromium asks permission on behalf of the current web page while Firefox treats as the add-on permission. Likely it is a result of "(CVE-2023-25729) Extensions are not prompted before opening external schemes, leading to security issues" Treatment of external protocol handlers is rather inconsistent in browsers and it is unstable.