Open
Bug 1756999
Opened 4 years ago
Updated 4 years ago
Empty address bar is displayed instead of blocking after Executing javascript in the domain of a sandboxed iframe
Categories
(Core :: DOM: Core & HTML, defect)
Tracking
()
NEW
| Tracking | Status | |
|---|---|---|
| firefox99 | --- | affected |
People
(Reporter: hyacoub, Unassigned)
References
Details
Affected versions
Firefox Nightly 99.0a1 (2022-02-24)
Affected platforms
Windows 10 x64
Ubuntu 20.04 x64
macOS 11.6
Steps to reproduce
- Open Firefox and access "https://emcmanus.github.io/xss.html".
- Click on "Click me".
Expected result
A new tab is opened and "about:blank#blocked" address should be displayed in the address bar.
Actual Result
A new tab is opened but the address bar is empty.
|
Reporter | |
Updated•4 years ago
|
Summary: Empty address bar is displayed instead of blocking after opening after Executing javascript in the domain of a sandboxed iframe → Empty address bar is displayed instead of blocking after Executing javascript in the domain of a sandboxed iframe
|
|
Reporter | |
Updated•4 years ago
|
See Also: → CVE-2022-26384
|
|
Reporter | |
Comment 1•4 years ago
|
||
This bug is a follow up of bug 1744352.
You need to log in
before you can comment on or make changes to this bug.
Description
•