Closed
Bug 1299418
Opened 9 years ago
Closed 9 years ago
XSS in adress bar
Categories
(Firefox :: Address Bar, defect)
Tracking
()
RESOLVED
INVALID
People
(Reporter: nitishmane41, Unassigned)
Details
Attachments
(1 file)
|
119.83 KB,
image/png
|
Details |
This is Result what i'm trying to say
User Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:50.0) Gecko/20100101 Firefox/50.0
Build ID: 20160829004001
Steps to reproduce:
When i have Opened new Tab on Firefox Developer Edition 50.0a2 Entered Javascript Code into Address Bar.
javascript:alert(1); or all alert & prompt
Actual results:
browser showed me alert window. when i go further for javascript:alert(window.location) it was also working.
Expected results:
i expected to browser search result javascript:alert(1) on default search engine which i choosed for my browser
|
||
Comment 1•9 years ago
|
||
This is by design. It's useful for bookmarklets and other testing.
Group: firefox-core-security
Status: UNCONFIRMED → RESOLVED
Closed: 9 years ago
Component: Untriaged → Location Bar
Resolution: --- → INVALID
You need to log in
before you can comment on or make changes to this bug.
Description
•