Closed (duplicate)
Project:
Security Kit
Version:
2.0.3
Component:
Code
Priority:
Normal
Category:
Bug report
Assigned:
Unassigned
Reporter:
Created:
29 Jun 2026 at 07:46 UTC
Updated:
29 Jun 2026 at 13:42 UTC
Jump to comment: Most recent
When loading a web page with seckit module installed, Firefox gives a number of warnings
An unbalanced tree was written using document.write() causing data from the network to be reparsed. More information: https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsing
It blames this code.
/**
* If site is not being framed or being framed within the same host,
* start commenting out seckit.no_body.css.
*/
if (top === self || top.location.hostname === self.location.hostname) {
document.write('<!--');
}
It relies on document.write, which according to https://developer.mozilla.org/en-US/docs/Web/API/Document/write#browser_... is "deprecated"
I am not sure whether I completely understand the purpose of above code, I think
document.getElementById('seckit-clickjacking-no-body')?.remove();
might also do the trick, as it would remove the
containing seckit.no_body.css.
Comments
Comment #2
jvdkolk commentedComment #3
jvdkolk commentedhttps://www.drupal.org/project/seckit/issues/3193443