Open
Bug 1555367
Opened 5 years ago
Updated 2 years ago
Should preserve container when middle-clicking "go" and/or when using accel-enter in address/location bar
Categories
(Firefox :: Address Bar, defect, P3)
Tracking
()
NEW
People
(Reporter: eugeneshap, Unassigned)
References
(Blocks 1 open bug)
Details
(Keywords: dupeme)
Attachments
(1 file)
|
54.36 KB,
image/png
|
Details |
container escape.png
User Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:69.0) Gecko/20100101 Firefox/69.0
Steps to reproduce:
- open a tab in container
- input new url in address bar.
- click arrow "Go to the address in the Location Bar" with the mouse wheel
- new tab is opened in not-containered mode
actual input is shown in screenshot
Actual results:
new tab is opened in not-containered mode
Expected results:
i expected that new tab would be in a containered mode. i think that unexpected loss of a container mode could cause security issues because if users could be tricked to reproduce the steps they could unexpectedly lose anonimity of a container
|
||
Comment 1•5 years ago
|
||
This isn't exploitable, so it's better off not being a hidden bug.
Group: firefox-core-security
Status: UNCONFIRMED → NEW
Component: Untriaged → Address Bar
Ever confirmed: true
Keywords: dupeme
Summary: Container escape by Go to the address in the Location Bar → Should preserve container when middle-clicking "go" and/or when using accel-enter in address/location bar
|
|
||
Updated•5 years ago
|
Blocks: ContextualIdentity
|
||
Updated•5 years ago
|
Priority: -- → P3
|
|
||
Updated•4 years ago
|
Severity: normal → S3
You need to log in
before you can comment on or make changes to this bug.
Description
•