IE10 with JS disabled executes manually entered `onmousedown`

In IE10, I disabled JS execution by setting the maximum level of security (IE11 also affected).

Then I add or edit the onmousedown attribute for any element on any site (for example, body element on www.google.com ).

 <body onmousedown="alert('Hello')">...</body> 

And so I get a warning when clicked anywhere.

Is a behavior or bug expected?

+4
source share
1 answer

F12 has its own Disable Menu in IE10:

This menu will help you check how users will experience your site based on how they set up their browser. The following commands are available in the Disable menu:

Script

Disable all scripts on the web page. This command must be pressed again to enable all scripts. When selected, the command is set and causes the page to refresh. This command is not available if Internet Security mode is set to security mode. To activate this command, set Protected Mode to Off.

Popup blocker

Disable all blocking pop-ups so that pop-ups are allowed on this website. This command must be selected again to enable pop-up blockers. This command is not available if Internet Security mode is set to security mode. To activate this command, set Protected Mode to Off.

All CSS

Disable all cascading style sheets (CSS) on the page. Click again to enable all CSS. When selected, the command is set and causes the page to refresh to display the selection. This command will be reactivated when the web page refreshes.

This is deprecated in IE11:

There are currently no plans to return the shutdown menu from IE10 F12 . You can disable most of the features earlier in the F12 disable menu from the advanced Internet Options and security settings.

References

+2
source

Source: https://habr.com/ru/post/1487825/


All Articles