Closed Bug 228594 Opened 21 years ago Closed 19 years ago

iframe's should not be allowed to load any parent document, as a child iframe

Categories

(SeaMonkey :: General, defect)

x86
Windows 2000
defect
Not set
normal

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: scunliffe, Unassigned)

References

Details

Attachments

(3 files)

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.4) Gecko/20030624
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.4) Gecko/20030624

If you have a file, called fileAAA.html, which has an iframe, called
fileBBB.html, which... either (i or ii)
i) contains an iframe, sourcing fileAAA.html
or
ii) contains a subframe, sourcing any "parent" document

You get an endless/ redundant loop.

(This is of course bad web programming, but...)

Reproducible: Always

Steps to Reproduce:
1. create fileAAA.html with an iframe tag, calling
2. (create) fileBBB.html with an iframe tag, calling
3. (create) fileCCC.html with an iframe tag, calling
4. fileAAA.html

Actual Results:  
Nesting, nesting, nesting...

Expected Results:  
Mozilla should check, when loading an iframe, that the source, does not either
this' source, or any *parent source* of this.

*parent source*  would be any file, that contains and iframe, sourcing 'this'

It didn't crash on my Win2K box, but I'm guessing that a Win95/98 box might not
be so smart.  I'm not sure whether the nesting ever stopped or not, and if so,
by Mozilla or Windows.  All I know is that my Task Meter peaked, then dropped
off after a second or two.
Load this file... which loads fileBBB.html, which loads fileCCC.html, which
re-loads fileAAA.html, which loads..., ..., ..., ...
Attached file fileBBB.html
Attached file fileCCC.html
Attachment #137474 - Attachment description: fileAAA.html (Load this First) → fileAAA.html (Load this First) [[Save all three files and load separately, outside of Bugzilla]]
Related: Bug 136580
LInux 2003122707 loads each doc three times. You might try a newer build.
I did find a newer bug bug 228829 which looks to stop more creative uses for frames.
Product: Browser → Seamonkey
Fixed by patch for bug 228829
Status: UNCONFIRMED → RESOLVED
Closed: 19 years ago
Depends on: 228829
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: