I think it only affect local display of a Drupal site.

To reproduce:
1) Go to a drupal site
2) replace the url with javascript:alert($('h2').append(' your text here '));
3) Alert says 'object Object'
4) The 'your text' gets appended to h2 tags locally.

Maybe it's a Firefox bug? well I tried with some other CMS and not work...

Comments

nevets’s picture

nevets commented
Status: Needs review » Fixed

Not a bug, its a feature of having a javascript, you can use javascript to change the page.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.