376629 - Attacker can simulate drag + drop

Status: RESOLVED DUPLICATE of bug 329385

(Firefox :: General, defect)

Description

[Paul Nickerson]

Attachment: double-clicking a webpage item can cause xss

Using window.moveBy, moveTo, resizeBy, and resizeTo, an attacker can simulate a user dragging and dropping an item.

Expected results:
Drag and drop should be user-driven only

Actual results:
Script can cause drag and drop

Example:
<a href="http://google.com" onmousedown="window.moveBy(1,1)">mouse down</a>
Notice that the cursor changes to reflect a drag+drop. This bug can be  made more dangerous when combined with another bug, as shown in the attachment

Comment 1

[Paul Nickerson]

Whoops, already submitted this awhile ago.