Closed
Bug 1479905
Opened 7 years ago
Closed 7 years ago
Strange client UI bug
Categories
(Firefox :: Security, defect)
Firefox
Security
Tracking
()
RESOLVED
DUPLICATE
of bug 1401091
People
(Reporter: yoxall, Unassigned)
Details
(Keywords: reporter-external, Whiteboard: [reporter-external] [client-bounty-form] [verif?])
Mozilla,
I recently noticed very strange behavior with navigation in Firefox. When navigating to a webpage that has no title via new tab, it uses the previous tab's rather than the new location.
Demo:
1. Visit https://www.google.co.uk/search?q=site%3Ayoxall.me.uk&oq=site%3Ayoxall.me.uk&aqs=chrome..69i57j69i58.2875j0j1&sourceid=chrome&ie=UTF-8
2. One of the entries is "Click here to go back. NOT_FOUND", this webpage doesn't have a <title>.
3. If you click the link normally it updates the title of that tab to "yoxall.me.uk/page/2". Go back and try open the same link in a new tab via right click.
4. Notice how the title oddly remains "google.co.uk/url?...", but you're actually on the same yoxall.me.uk webpage? This will remain even after refresh, until you navigate to another page.
See example: https://i.imgur.com/fEm3vJb.gif
I tried this on both Windows & Linux, and can reproduce on both. Chrome doesn't seem to have the same issue.
Not sure why the behaviors are different, but this could possibly be abused for phishing
Flags: sec-bounty?
Updated•7 years ago
|
Group: firefox-core-security
Status: UNCONFIRMED → RESOLVED
Closed: 7 years ago
Resolution: --- → DUPLICATE
Updated•7 years ago
|
Flags: needinfo?(dao+bmo)
Updated•7 years ago
|
Flags: sec-bounty? → sec-bounty-
Updated•9 months ago
|
Keywords: reporter-external
You need to log in
before you can comment on or make changes to this bug.
Description
•