Closed
Bug 210474
Opened 23 years ago
Closed 23 years ago
Websites can bypass block unrequested windows preferences using form and body onload-attribute
Categories
(SeaMonkey :: UI Design, defect)
SeaMonkey
UI Design
Tracking
(Not tracked)
RESOLVED
DUPLICATE
of bug 144726
People
(Reporter: cobron, Assigned: jag+mozilla)
References
()
Details
User-Agent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.4) Gecko/20030612
Build Identifier: Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.4) Gecko/20030612
With following code one can use the onLoad-method to bypass the "block
unrequested windows"-preference and create popups using javascript and the
form-element:
<html>
<head>
<script language=JavaScript>
<!--//
function loadpopup()
{
document.flauncher.submit();
focus();
setTimeout('focus()',2000);
}
// -->
</script>
</head>
<body>
<form name='flauncher' action='myAd.html'
target='adv' method='post' onSubmit='focus();'>
</form>
<body onLoad='loadpopup()'>
</html>
Reproducible: Always
Steps to Reproduce:
1.Reload the page :)
2.
3.
Actual Results:
Popup window appeared
Expected Results:
Blocked the popup window
|
||
Comment 1•23 years ago
|
||
->XPApps
Assignee: general → jaggernaut
Component: Browser-General → XP Apps
QA Contact: general → paw
|
|
||
Comment 2•23 years ago
|
||
Dupe of bug 187255 (though the summary might be incorrect)?
Same code is mentioned in bug 187255 comment 10.
*** This bug has been marked as a duplicate of 187255 ***
Status: UNCONFIRMED → RESOLVED
Closed: 23 years ago
Resolution: --- → DUPLICATE
|
|
Reporter | |
Comment 4•23 years ago
|
||
I played around with the code and got to 2 condensed variants. They don't seem
to be a duplicate of 187255 (however in the comments this code is mentioned).
<html>
<head>
<script language="JavaScript"><!--//
function loadpopup(){
document.testform.submit();
}
// --></script>
</head>
<body onload="loadpopup()">
<form name="testform" action="addPage.html" target="_blank"> </form>
</body>
</html>
shorter (clearer) variant :
<html><head></head>
<body onload="document.testform.submit()">
<form name="testform" action="addPage.html" target="_blank"> </form>
</body>
</html>
Reopening to clone against correct bug number
Status: RESOLVED → UNCONFIRMED
Resolution: DUPLICATE → ---
*** This bug has been marked as a duplicate of 144726 ***
Status: UNCONFIRMED → RESOLVED
Closed: 23 years ago → 23 years ago
Resolution: --- → DUPLICATE
|
||
Updated•21 years ago
|
Product: Core → Mozilla Application Suite
You need to log in
before you can comment on or make changes to this bug.
Description
•