Open Bug 1031422 Opened 10 years ago Updated 2 years ago

triple click selection does not highlight full selection when a text area is included

Categories

(Core :: DOM: UI Events & Focus Handling, defect)

defect

Tracking

()

People

(Reporter: curtisk, Unassigned)

Details

Attachments

(1 file)

Attached file bla.htm
Received:Thu, 26 Jun 2014 04:23:58 -0700 (PDT) Subject: FF30/WIN Firefox copies to much on triple click select From: Mark van Tilburg <markvantilburg@gmail.com> To: Mozilla Security <security@mozilla.org> -----//----- See the attached bla.htm If you select this line with triple click <a href="#SurveyLink#">Link tekst</a> Then CTRL-C to copy, the contents of the textarea is included in the paste. This should not happen. When you have a tutorial with some command line commands there could be wrong stuff appended to the copy/paste action of the user. -- Met vriendelijke groet, Mark van Tilburg
this was reported to sec at and while a user could be tricked into selecting more than intended I don't think this rises to the level of a security issue. We should, however, review this and ensure that when triple click is used that we properly show all that is selected. In my test this worked as described in the above issue report with the supplied file and the selection of items in the text area did not show as being selected.
This issue exists in the latest version of Firefox (43.0.4) as well. I tested on: Name Firefox Version 43.0.4 Build ID 20160105164030 Update Channel release User Agent Mozilla/5.0 (Windows NT 6.1; WOW64; rv:43.0) Gecko/20100101 Firefox/43.0 Tripple click in Firefox selects the text area but does not highlight it in this case. However, if same test is performed in Chrome, text area is highlighted. Confirming it as a defect in FF.
Component: Untriaged → Event Handling
Product: Firefox → Core
Component: Event Handling → User events and focus handling
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: