1365392 - Tech support scam website consumes all memory of machine

Status: RESOLVED DUPLICATE of bug 1314912

(Firefox :: Untriaged, defect)

Description

[jae]

Attachment: ff_pagelock.html

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36

Steps to reproduce:

Visit tech support scam website (html attached) - http://cometodaddy.xyz/index2.html (currently down)


Actual results:

All available memory on machine is slowly consumed. Tested on windows and linux. Page fails to load. Unable to reproduce on local machine, reproduced when accessed via normal web hosting. 


Expected results:

Website should have loaded with normal scammy popups.

Comment 1

[:Gijs (he/him)]

Thanks for the report. We're aware of the issue causing this hang. It is being tracked in bug 1246773. The relevant code from the page you provided is:

      var total = "";
      for( var i = 0; i < 100000; i++ ) {
        total = total + i.toString();
        history.pushState(0,0, total );
      }

which, as you can see, is identical to the code already listed in bug 1246773.