Closed Bug 1653570 Opened 9 months ago Closed 8 months ago

[ANDROID] DOS Browser hangs on loading the code snippet

Categories

(Firefox for Android Graveyard :: General, defect)

Firefox 68
ARM64
Android
defect

Tracking

(Not tracked)

RESOLVED MOVED

People

(Reporter: hackerrobinrana, Unassigned, NeedInfo)

References

(Blocks 1 open bug)

Details

(Keywords: csectype-dos, hang)

Attachments

(2 files)

Attached file test.html

##Summary:

Basically the function location.reload() is causing browser to hang as browser is not able to handle multiple reloads but similar issue cannot be seen in (Mi browser,Safari Browser, Mint Browser and Oppo Web Browser) as i am able to close the current tab.
Products affected:

Latest FIREFOX Browser in Android.
##Steps To Reproduce:

Use the below code and save it as html file and then open it up on browser :-
TEST

LINK:-- https://silentmode.000webhostapp.com/dos.html

<script>
open("");
setInterval('location.reload()',1);
</script>

Or

open up pop.html that i have attached
##Supporting Material/References:

i have attached html file that contains the code causing denial of service,

Attached video poc Firefox.mp4
Flags: needinfo?(dveditz)

We will not fix this in Firefox 68, but if you can confirm that his same issue happens in Firefox 79 or 80 (Fenix) then please let us know and we will move it to that project for assessment. You can try by downloading Firefox Beta, which is Fenix 80.

Flags: needinfo?(hackerrobinrana)

My experience was different from the reporter's:

  • on Fennec (Firefox for Android 68.x) I can easily hit the "X" to stop the page reloading -- it flickers between loads
  • on Chrome the browser is locked up solid
  • on Fenix (Firefox for Android 79+) the browser is locked up solid (like chrome)

I couldn't find "Safari" on Android to compare :-P

Blocks: eviltraps
Status: UNCONFIRMED → NEW
Ever confirmed: true
Flags: needinfo?(dveditz)
Keywords: csectype-dos, hang

Moved to https://github.com/mozilla-mobile/android-components/issues/8166 but it may move back to the GeckoView component.

Status: NEW → RESOLVED
Closed: 8 months ago
Resolution: --- → MOVED
Product: Firefox for Android → Firefox for Android Graveyard
You need to log in before you can comment on or make changes to this bug.