antiClickJack

I've just managed to work out why at least one of the pages I've
encountered displays as completely blank in NetSurf, despite appearing
to have a good deal of basic HTML content in addition to all its scripts
etc:
https://www.chowhound.com/food-news/194075/how-to-use-bearnaise-sauce-on-practically-everything/
contains the header line
<STYLE id="antiClickjack">body{display:none !important;}</STYLE>
which has the effect of hiding the entire content of the page.

Apparently this is intended as a means of preventing pages from being
displayed in iframes, and is assumed to be overridden by a piece of
JavaScript elsewhere in the page source which will remove the display:
none if the current window is the topmost element. However, this
doesn't work at all in NetSurf's JavaScript support (even if the browser
window *is* top of the stack, which in the case of a RISC OS desktop it
often isn't!)

--
Harriet Bazley == Loyaulte me lie ==

The fact that you're paranoid.... doesn't mean they're NOT out to get you.
_______________________________________________
netsurf-users mailing list -- netsurf-users@netsurf-browser.org
To unsubscribe send an email to netsurf-users-leave@netsurf-browser.org