Using Firebug Lite bookmarklet in IE8 with a secure site

318 views
Skip to first unread message

Paul

unread,
May 16, 2010, 9:41:57 AM5/16/10
to Firebug
Hi,

Can anyone confirm that Firebug Lite works/does not work with IE8 and
secure sites?

I am trying a Firebug Lite bookmarklet in a secure (https) site and it
isn't working.

Does anyone know of an IE8 security setting that may be preventing
Firebug Lite from working? Is IE8 more restrictive than other browsers
when it comes to bookmarklets trying to add a script tag with a src
attribute from another site? I only ask because the bookmarklet works
fine in Chrome and Firefox.

Thanks,

Paul.

--
You received this message because you are subscribed to the Google Groups "Firebug" group.
To post to this group, send email to fir...@googlegroups.com.
To unsubscribe from this group, send email to firebug+u...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/firebug?hl=en.

Pedro Simonetti Garcia

unread,
May 16, 2010, 2:57:08 PM5/16/10
to fir...@googlegroups.com
Hi Paul,

Which version of Firebug Lite are you using? Also, how does your bookmarlet
looks like? Please note that the bookmarlet itself is a small program and it
may contain bugs. The latest Firebug Lite version is "1.3.0.b2", and the latest
bookmarlet starts with something like this:

"javascript:(function(F,i,r,e,b,u,g,L,I,T,E)"

http://getfirebug.com/releases/lite/beta/#Install


2010/5/16 Paul <paul...@gmail.com>:
> Can anyone confirm that Firebug Lite works/does not work with IE8 and
> secure sites?

Depending on the version of Firebug Lite and bookmarlet the answer is: yes,
some old versions wasn't working correctly on HTTPS protocols.


> I am trying a Firebug Lite bookmarklet in a secure (https) site and it
> isn't working.

Try using the latest version of Firebug Lite and bookmarlet, and let me
know if it works for you.


> Does anyone know of an IE8 security setting that may be preventing
> Firebug Lite from working? Is IE8 more restrictive than other browsers
> when it comes to bookmarklets trying to add a script tag with a src
> attribute from another site?

I guess this is not a matter of settings, it's the normal behavior of IE8.
All IE versions (not only IE8) are more restrictive when it comes to
executing bookmarlets.

If you try to load a script via bookmarlet in IE, on a site with HTTPS
protocol, and the script is hosted on a HTTP protocol, IE will complain
about it. Also, if the JavaScript application loaded uses any resources
hosted on a non-HTTPS protocol (such as stylesheets/images/scripts)
IE will complain too.

For security reasons (to avoid the "man in the middle" attack), the new
version of Firebug Lite bookmarlet uses only HTTPS, and consequently,
will also work fine on sites using HTTPS protocol.

Please let us know if the new version works for you. I have tested on IE8
right now and it seems to be working fine.

regards,

Pedro Simonetti.

Paul

unread,
May 24, 2010, 3:38:38 AM5/24/10
to Firebug
Bit embarrassed to say the problem was solved by actually reading the
IE popup's warning about bookmarklet served over insecure connection.
I incorrectly assumed when it popped up that its "Yes" button meant
"Yes, agree to run the Javascript", but in fact it was the "No" option
I should have been using!

Thanks for your reply and sorry for wasting your time!

On May 16, 7:57 pm, Pedro Simonetti Garcia <pedrosimone...@gmail.com>
wrote:
> Hi Paul,
>
> Which version of Firebug Lite are you using? Also, how does your bookmarlet
> looks like? Please note that the bookmarlet itself is a small program and it
> may contain bugs. The latest Firebug Lite version is "1.3.0.b2", and the latest
> bookmarlet starts with something like this:
>
> "javascript:(function(F,i,r,e,b,u,g,L,I,T,E)"
>
> http://getfirebug.com/releases/lite/beta/#Install
>
> 2010/5/16 Paul <paulgr...@gmail.com>:
> > For more options, visit this group athttp://groups.google.com/group/firebug?hl=en.
>
> --
> You received this message because you are subscribed to the Google Groups "Firebug" group.
> To post to this group, send email to fir...@googlegroups.com.
> To unsubscribe from this group, send email to firebug+u...@googlegroups.com.
> For more options, visit this group athttp://groups.google.com/group/firebug?hl=en.
Reply all
Reply to author
Forward
0 new messages