onerror popups should be blocked

RESOLVED FIXED in mozilla1.7final

Status

SeaMonkey
UI Design
RESOLVED FIXED
14 years ago
12 years ago

People

(Reporter: Jesse Ruderman, Assigned: Dan M)

Tracking

(Blocks: 1 bug, {testcase})

Trunk
mozilla1.7final
x86
Windows XP
testcase

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(2 attachments)

(Reporter)

Description

14 years ago
Onerror can be abused by intentionally triggering an error, so onerror popups
should be disallowed.
(Reporter)

Comment 1

14 years ago
Created attachment 145312 [details]
demo
(Assignee)

Comment 2

14 years ago
Created attachment 145338 [details] [diff] [review]
remove "error" from default list of allowed popup events

onerror seems like a reasonable circumstance to allow a new window, but your
mouseover error case convinced me.
(Assignee)

Updated

14 years ago
Attachment #145338 - Flags: superreview?(jst)
Attachment #145338 - Flags: review?(bzbarsky)
Comment on attachment 145338 [details] [diff] [review]
remove "error" from default list of allowed popup events

r=bzbarsky
Attachment #145338 - Flags: review?(bzbarsky) → review+
Comment on attachment 145338 [details] [diff] [review]
remove "error" from default list of allowed popup events

sr=jst
Attachment #145338 - Flags: superreview?(jst) → superreview+
(Assignee)

Updated

14 years ago
Attachment #145338 - Flags: approval1.7?

Comment 5

14 years ago
Comment on attachment 145338 [details] [diff] [review]
remove "error" from default list of allowed popup events

a=chofmann for 1.7
Attachment #145338 - Flags: approval1.7? → approval1.7+
(Assignee)

Updated

14 years ago
Status: NEW → RESOLVED
Last Resolved: 14 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla1.7final
Product: Core → Mozilla Application Suite
You need to log in before you can comment on or make changes to this bug.