Hacker News Reader

Comment by moooo99 | Hacker News Reader

I recently came across a fairly modern looking website that blocked my right click and displayed an alert “you’re not allowed to view this sites source code”. I could not help but to laugh out loud

View on HN

Chrome did introduce a configuration feature to block viewing source code recently.

Javascript hijacking right click is prevented by shift-right click in Firefox.

Note that this is an enterprise policy and not something a website can enable, only your computer's administrator (you on your personal device, a school admin or employer in the intended case)

For now

Seems pretty impossible to enforce otherwise with how the web currently works.

At some point the website is sending you HTML and JS to be interpreted on your computer.

Same as with the Telegram's DRM.

The difference between an enterprise device management feature and a web API are... pretty massive.

It doesn't seem particularly unreasonable that a company dealing with sensitive data would want to prevent their less computer-educated employees from falling for self-XSS attacks

https://en.wikipedia.org/wiki/Self-XSS

View source is completely disconnected from the developer tools, and poses no self-XSS danger.

The given reason to disable view source itself was "students are able to find Google Form Quiz answers in source code" which is pretty ridiculous.

Also something about getting past a really broken web filter.

Ah sorry, I was thinking it was the entire browser console.

Or maybe that was already an option to disable by admins before this

Reply on news.ycombinator.com