Redirect to arbitrary-content.com
See original GitHub issueOn Firefox 59.0.2 for Windows, after I sort a few elements i get redirected to a website “arbitray-content.com”. I am using version 0.9.1 of the plugin.
My configuration is the following:
sortable('.table-sortable tbody.sort', {
handle : '.field-sortable',
acceptFrom : 'table.table-sortable tbody.sort',
forcePlaceholderSize : true,
placeholder : '<tr class="disabled"><td colspan="8"></td></tr>'
})
I see in the plugin where you make this call: event.dataTransfer.setData(‘text’, ‘arbitrary-content’);
I don’t undestand why it is redirecting me to http://arbitrary-content/, that it translates automatically to arbitrary-content.com
Thank you
Issue Analytics
- State:
- Created 5 years ago
- Comments:6 (3 by maintainers)
Top Results From Across the Web
Gaining access to arbitrary* Content Providers
The commonest type of vulnerability is when an exported activity passes an Intent to the attacker via Activity.setResult(code, intent) . On ...
Read more >An open redirect in GitLab CE/EE affecting all versions...
An open redirect in GitLab CE/EE affecting all versions. ... into visiting a trustworthy URL and being redirected to arbitrary content.
Read more >CVE-2022-3280 Detail - NVD
An open redirect in GitLab CE/EE affecting all versions from 10.1 prior to ... a trustworthy URL and being redirected to arbitrary content....
Read more >GitLab 10.1 < 15.3.5 / 15.4 < 15.4.4 / 15.5 < 15.5.2 Open ...
It is, therefore, affected by an open redirect vulnerability where an ... a trustworthy URL and being redirected to arbitrary content.
Read more >Elastic Stack 7.13.0 and 6.8.16 Security Update
Kibana url redirection flaw (ESA-2021-12) An open redirect flaw was found in ... to prevent this browser from rendering arbitrary content.
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
Try and change
event.dataTransfer.setData('text/plain', 'arbitrary');
toevent.dataTransfer.setData('text/html', 'arbitrary');
It’s a recurring issue in Firefox it seems. I tried
event.preventDefault()
but that just broke the thingTheres a few comments here that explain it: https://stackoverflow.com/questions/19055264/why-doesnt-html5-drag-and-drop-work-in-firefox
I haven’t tried setting it as just text instead of text/html
According to this thread, it seems you should use text: https://stackoverflow.com/questions/12803235/drag-and-drop-not-working-in-ie-javascript-html5
I’ll change it locally to ‘text’ to see if that works in Firefox, Chrome and Safari (macOS)