Closed Bug 1479905 Opened 6 years ago Closed 6 years ago

Strange client UI bug

Categories

(Firefox :: Security, defect)

defect
Not set
normal

Tracking

()

RESOLVED DUPLICATE of bug 1401091

People

(Reporter: yoxall, Unassigned)

Details

(Whiteboard: [reporter-external] [client-bounty-form] [verif?])

Mozilla,

I recently noticed very strange behavior with navigation in Firefox. When navigating to a webpage that has no title via new tab, it uses the previous tab's rather than the new location.

Demo:
1. Visit https://www.google.co.uk/search?q=site%3Ayoxall.me.uk&oq=site%3Ayoxall.me.uk&aqs=chrome..69i57j69i58.2875j0j1&sourceid=chrome&ie=UTF-8
2. One of the entries is "Click here to go back. NOT_FOUND", this webpage doesn't have a <title>.
3. If you click the link normally it updates the title of that tab to "yoxall.me.uk/page/2". Go back and try open the same link in a new tab via right click.
4. Notice how the title oddly remains "google.co.uk/url?...", but you're actually on the same yoxall.me.uk webpage? This will remain even after refresh, until you navigate to another page.

See example: https://i.imgur.com/fEm3vJb.gif

I tried this on both Windows & Linux, and can reproduce on both. Chrome doesn't seem to have the same issue.

Not sure why the behaviors are different, but this could possibly be abused for phishing
Flags: sec-bounty?
Dão, is this a dupe of bug 1401091?
Flags: needinfo?(dao+bmo)
Group: firefox-core-security
Status: UNCONFIRMED → RESOLVED
Closed: 6 years ago
Resolution: --- → DUPLICATE
Flags: needinfo?(dao+bmo)
Flags: sec-bounty? → sec-bounty-
You need to log in before you can comment on or make changes to this bug.