Closed Bug 463557 Opened 16 years ago Closed 16 years ago

Page locks up the browser if the user attempts to close it (JavaScript infinite loop document.alert())

Categories

(Firefox :: Security, defect)

3.0 Branch
x86
Windows Vista
defect
Not set
critical

Tracking

()

RESOLVED DUPLICATE of bug 61098

People

(Reporter: thekigen, Unassigned)

References

()

Details

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.0.3) Gecko/2008092417 Firefox/3.0.3
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.0.3) Gecko/2008092417 Firefox/3.0.3

It appear that at http://www.smouch.net/lol/ they have a JavaScript that attaches to the onUnload feature of JavaScript that will lock up the browser in a infinite document.alert().  I personally consider this a exploit and a rather annoying one at that.  It would be nice if there was something established to prevent someone purposefully getting the JavaScript stuck in an infinite loop.

Reproducible: Always

Steps to Reproduce:
1. Visit http://www.smouch.net/lol/
2. Attempt to close tab or browser.
3. Enjoy infinite loop.
Actual Results:  
Browser keeps popping up doucment.alert() boxes with different lines to the Rick Roll music.

Expected Results:  
Stopped the doucment.alert() from continuing after the first or at least third document.alert().
Version: unspecified → 3.0 Branch
This is just another variant of bug 61098.
Group: core-security
Status: UNCONFIRMED → RESOLVED
Closed: 16 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.