1487789 - Firefox doesn't go to mouseover address. Not a redirect issue.

Status: RESOLVED DUPLICATE of bug 257307

(Core :: DOM: Core & HTML, defect)

Description

[MarjaE]

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:61.0) Gecko/20100101 Firefox/61.0
Build ID: 20180807170231

Steps to reproduce:

I moused over a Tumblr notification. Firefox showed an address. I clicked the link.


Actual results:

Firefox didn't open the specified address. Instead a sidebar opened, without any way to reach the specified address.


Expected results:

If Firefox isn't going to open the link, then the mouseover shouldn't show its address.

Comment 1

[Matthias Versen [:Matti]]

I do not know what Tumblr is and how to get to that notification page but without excat steps to reproduce u guess that you mean bug 257307

Comment 2

[MarjaE]

This does not involve phishing, it involves Firefox showing the wrong url.

Comment 3

[MarjaE]

It's a micro-blogging site. If I get a notification saying someone reblogged one of my posts, and I mouse over the link in the notification, Firefox shows the address of my post. But if I click on the link in the notification, Firefox instead opens a pain-slider of info on who reblogged it.

Comment 4

[MarjaE]

Attachment: This shows the notification (near the tob) and the address of the post (at the bottom). Note that some user css isn't working.

Comment 5

[MarjaE]

Attachment: This shows the slider.

Comment 6

[Matthias Versen [:Matti]]

bug 257307 is not about phishing. It's about the fact that you can intercept a click on a link and open a differen URL.
That can be used for phishing but many sites are using that for different purposes.

Comment 7

[Andreas Farre [:farre]]

This is indeed a similar issue of Bug 257307. It is quite easy to construct a situation where the status bar indicates a destination but an actual interaction with the element results in something completely different. This is a behaviour that is present in all browsers.