1310704 - status bar spoofing

Status: RESOLVED DUPLICATE of bug 1310432

(Firefox :: Untriaged, defect)

Description

[Anurag]

Attachment: a.html

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36

Steps to reproduce:

1) Open the attached a.html
<a id="myLink" onfocus="document.getElementById('myLink').href ='http://abcd.com'" href="http://google.com">Click Me</a>
2) Place your cursor on link "Click Me"
3) On status bar you will see it will goto google.com
4) Click on it and it will move to abcd.com instead


Actual results:

Clicking on the link navigate user to an unexpected website link. User trusting status bar would be spoofed


Expected results:

User should always be shown the correct url where they would be navigated.

Comment 1

[:Gijs (he/him)]

Please stop reporting duplicates of this bug. If this is some kind of group/class project, please tell your instructor to stop abusing a public bugtracker and use landfill.mozilla.org instead.