Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

Code from other sites shows up in my page.- Possible security Issue

BritaNelson
BritaNelson
more options

I am working on a webpage behind a firewall. I use both the firebug script debugger for firefox and the IE script debugger for IE. If I go to another website (cnn or reddit), then come back to my test page, which has an error in the jquery dropdown code I wrote, instead of getting the notice that there is an error in jquery-1.8.3.js, I get a notice that there is an error in the code from the previous page. For instance http://www.redditstatic.com/reddit-init.en.IY9Adp1eOs.js shows up in the error console when I am on my own test server. Since the code on my page is trying to run someone else's code it seems to me that this could be a major security issue. This may be hard to understand. I have screen shots that I will try to load. Thanks, Brita ps. When I debug in IE. I only show the expected jquery error.

I am working on a webpage behind a firewall. I use both the firebug script debugger for firefox and the IE script debugger for IE. If I go to another website (cnn or reddit), then come back to my test page, which has an error in the jquery dropdown code I wrote, instead of getting the notice that there is an error in jquery-1.8.3.js, I get a notice that there is an error in the code from the previous page. For instance http://www.redditstatic.com/reddit-init.en.IY9Adp1eOs.js shows up in the error console when I am on my own test server. Since the code on my page is trying to run someone else's code it seems to me that this could be a major security issue. This may be hard to understand. I have screen shots that I will try to load. Thanks, Brita ps. When I debug in IE. I only show the expected jquery error.

Chosen solution

I only rarely use Firebug, so I haven't observed this myself. Or just ignored it. Hopefully someone else here or on the Firebug list/forum can address that.

Read this answer in context 👍 1

All Replies (6)

jscher2000 - Support Volunteer
jscher2000 - Support Volunteer
  • Top 25 Contributor
more options

I know that Firefox's own Error Console doesn't segregate errors and warnings by site; it's just a chronological list. Is it possible that Firebug similarly is displaying errors generated by other sites along with the errors from your site? You might try the Firebug discussion list for clarification: https://getfirebug.com/community

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

You can check this with the Web Console (Firefox/Tools > Web Developer;Ctrl+Shift+K).
This console should only display messages from the tab in which you have opened it.

BritaNelson
BritaNelson Question owner
more options

I tried going to reddit, browsing, then coming to the start page of my web site and navigating to new page (4 clicks). During all this time the error console is empty. When I change the value of the dropdown menu, then the error appears. So it looks like the .js on my page is causing an error with this other code.

I set the header for no-cache, but it didn't make any difference.

Can someone please help me with this?

Thanks, Brita

jscher2000 - Support Volunteer
jscher2000 - Support Volunteer
  • Top 25 Contributor
more options

Hi Brita, could you compare the timestamps in Firefox's Error Console (Ctrl+Shift+j) to see whether Firebug is just slow in displaying the errors?

BritaNelson
BritaNelson Question owner
more options

Hi jscher, Thanks for your reply. When I click the Ctrl+Shift+j I get a current timestamp, but is shows the error in my copy of jquery-1.9.1.js. (this is what I would expect) Someone on another forum suggested that this could b a glitch in firebug that is pulling strange data when trying to find the error.

Have you, or anyone else out there heard of this happening? Brita

jscher2000 - Support Volunteer
jscher2000 - Support Volunteer
  • Top 25 Contributor
more options

Chosen Solution

I only rarely use Firebug, so I haven't observed this myself. Or just ignored it. Hopefully someone else here or on the Firebug list/forum can address that.