Closed Bug 1779803 Opened 4 years ago Closed 4 years ago

Cross-site Scripting

Categories

(DevTools :: Console, defect)

Firefox 102
defect

Tracking

(Not tracked)

RESOLVED DUPLICATE of bug 1732543

People

(Reporter: adonkidz7, Unassigned)

Details

Attachments

(3 files)

Attached image 1.jpg —

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36

Steps to reproduce:

I create a javascript code in a web editor. When I run the code, a pop-up appears in the Firefox browser.

Actual results:

Is this a feature in the Firefox browser?

Expected results:

If not a feature, then what is a vulnerability?

Attached video firefox.mp4 —

I just need reflection from Firefox browser. Is it a Firefox browser feature?

Component: Untriaged → Console
Product: Firefox → DevTools
Attached image 2.jpg —

This looks like Bug 1732543
The issue is in Instant Evaluation which is triggered although it shouldn't
This is not a security issue, as the webconsole as a self-xss protection mechanism

Status: UNCONFIRMED → RESOLVED
Closed: 4 years ago
Resolution: --- → DUPLICATE

:mccr8, can you open this up?

Flags: needinfo?(continuation)
Group: firefox-core-security
Flags: needinfo?(continuation)
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: