1294409 - Mozilla's "Protect the Fox" page reports "Oh Noes! An error occurred"

Status: RESOLVED INVALID

(www.mozilla.org :: Pages & Content, defect)

Description

[bsperan]

Attachment: A javascript script the reported fraud site makes visitors download, no doubt malware or a virus.

User Agent: Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0.1 Waterfox/47.0.1
Build ID: 20160705170440

Steps to reproduce:

Steps to reproduce:

I filled out this page, like it asks:

https://www.mozilla.org/en-US/about/legal/fraud-report/

The catch is to add an attachment to the "Attachment" area, then type something in the description. In my case, I reported this malware site:
https://aihavscambieuropei.org/4291264200212/46b97a0db466311332456639b71444fe.html

And I tried to attach the firefox-patch.js script the above malware site generated.


Actual results:

Actual page result:

"Oh Noes!
An error occurred. Try back later!"


Expected results:

https://www.mozilla.org/en-US/about/legal/fraud-report/?submitted=True

"Fraud Report
Your report has been sent.

Thank you for your help. It’s our community that makes us great."

DO NOTE: The difference, what made my second attempt successful, was the fact that I left out the "firefox-patch.js" script from the Attachment area, leaving it without an attachment and without an attachment description.

Attached is the script (likely malware) which caused the page to fail. I suspect that there may be something wrong with the aforementioned fraud reporting page's code that handles attachments.

Comment 1

[Eric Renaud [:erenaud]]

Only image files may be uploaded/submitted in this intake form. Closing as invalid.