Script permission prefs for hiding toolbar, nav bar, etc

VERIFIED DUPLICATE of bug 152256

Status

()

--
enhancement
VERIFIED DUPLICATE of bug 152256
16 years ago
16 years ago

People

(Reporter: mozilla, Assigned: security-bugs)

Tracking

Trunk
x86
Windows 2000
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(URL)

(Reporter)

Description

16 years ago
User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.3) Gecko/20030312
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.3) Gecko/20030312

Using the security preferences it is already possible to disable hiding of the
status bar and changing the status bar text.  It would also be nice to disable
hiding the browser window menu, hiding the navigation toolbar, etc.  Once a
malicious web page kills those two items, it can become impossible to continue
to use Mozilla.

Reproducible: Always

Steps to Reproduce:
1. Load the page given with the URL
2. Click on any picture
3. Wait for the page to completely load.

Actual Results:  
Page loads, navigation disappears, menu disappears.

Expected Results:  
This is the expected behaviour because there's currently no way to stop this
from happening.  It's impossible to escape pages that do this, because there's
no "back" button to hit.  This site in particular also disables the right-click,
so you can't even right click and hit "back".

It would be really nice to see security prefs for disabling the ability of
javascript to muck with the current window.  There's probably a need for them to
be able to muck with windows that they open themselves, but it should be
possible for the user to force his window to remain intact.

In lieu of or in addition to this, some means of right clicking on the Mozilla
title bar to access the "View" or "New" menu would be nice as well.

Updated

16 years ago
Summary: RFE: Script permission prefs for hiding toolbar, nav bar, etc → Script permission prefs for hiding toolbar, nav bar, etc
(Assignee)

Comment 1

16 years ago
Good idea.
Status: UNCONFIRMED → ASSIGNED
Ever confirmed: true
(Assignee)

Comment 2

16 years ago

*** This bug has been marked as a duplicate of 152256 ***
Status: ASSIGNED → RESOLVED
Last Resolved: 16 years ago
Resolution: --- → DUPLICATE

Comment 3

16 years ago
mass verify
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.