Open Bug 1917281 Opened 1 year ago Updated 1 year ago

Web page's Option dialog can overlay the address bar

Categories

(Firefox for Android :: Toolbar, defect, P3)

Firefox 129
defect

Tracking

()

People

(Reporter: lijoparappur, Unassigned)

Details

(Keywords: reporter-external)

Attachments

(2 files)

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:130.0) Gecko/20100101 Firefox/130.0

Steps to reproduce:

Load below HTML in Mozilla android version 129.0.2. Open it in horizontal Click fake omni bar which obscured url by select option. Techniques that overlay the address bar with another piece of browser chrome to obscuring happened.

<meta name="viewport" content="width=device-width, initial-scale=1">

<head>
    <title>Title of the document</title>
</head>
<style>
    body {
        margin: 0;
        padding: 0;
        overflow-x: hidden;
        overflow-y: hidden;
    }

    select {
        margin-top: 1%;
        height: 89%;
        width: 9999px;
    }
</style>

<select id="selectElement">

    <option id="spoofText"></option>
    <option selected> </option>
    <option selected> </option>
    <option selected> </option>
    <option selected></option>
    <option selected></option>
    <option selected></option>
    <option selected>Fake Omni bar</option>
</select>

Actual results:

Techniques that overlay the address bar with another piece of browser chrome to obscuring happened.

Expected results:

Techniques that overlay the address bar with another piece of browser chrome to obscuring must not happened.

Group: firefox-core-security → mobile-core-security
Component: Untriaged → General
Product: Firefox → Fenix
Attached file poc.html

It does cover part of the address bar, but it doesn't in any way look like a "fake" address. It's clearly part of a larger blob covering things up and not stealthy about it.

Status: UNCONFIRMED → NEW
Ever confirmed: true
Keywords: csectype-spoof
Summary: Spoof Using Select Option → Select Option can overlay the address bar, attempt to spoof
Group: mobile-core-security
Keywords: csectype-spoof

The Bugbug bot thinks this bug should belong to the 'Fenix::Toolbar' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.

Component: General → Toolbar

The severity field is not set for this bug.
:royang, could you have a look please?

For more information, please visit BugBot documentation.

Flags: needinfo?(royang)
Severity: -- → S4
Flags: needinfo?(royang)
Priority: -- → P3
Summary: Select Option can overlay the address bar, attempt to spoof → Web page's Option dialog can overlay the address bar
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: