HTML is rendered as Source

classilla / overbitenx

Because Firefox isn't complete without Gopherspace.

gopher://gopher.floodgap.com/

Other

65 stars 4 forks source link

HTML is rendered as Source #11

Closed frrobert2 closed 5 years ago

frrobert2 commented 5 years ago

I am running overbite on Firefox 68.0 64bit on Ubuntu 16.04. If I access an html document on a gopher site rather than the document being displayed as an html document the document source is displayed.

classilla commented 5 years ago

This is documented in README.md: "HTML and XML files are currently displayed as plain text. Because Jasper looks like an AJAX web app to Firefox, there are security concerns about loading and displaying arbitary HTML inside the page scaffold."

I can't see an easy way of changing this without introducing the possibility for a malicious server to use the feature for XSS.

frrobert2 commented 5 years ago

Sorry, I missed that in the readme.