onerror popups should be blocked

RESOLVED FIXED in mozilla1.7final

Status

RESOLVED FIXED
15 years ago
13 years ago

People

(Reporter: jruderman, Assigned: danm.moz)

Tracking

(Blocks: 1 bug, {testcase})

Trunk
mozilla1.7final
x86
Windows XP
testcase

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(2 attachments)

(Reporter)

Description

15 years ago
Onerror can be abused by intentionally triggering an error, so onerror popups
should be disallowed.
(Reporter)

Comment 1

15 years ago
Created attachment 145312 [details]
demo
(Assignee)

Comment 2

15 years ago
Created attachment 145338 [details] [diff] [review]
remove "error" from default list of allowed popup events

onerror seems like a reasonable circumstance to allow a new window, but your
mouseover error case convinced me.
(Assignee)

Updated

15 years ago
Attachment #145338 - Flags: superreview?(jst)
Attachment #145338 - Flags: review?(bzbarsky)
Comment on attachment 145338 [details] [diff] [review]
remove "error" from default list of allowed popup events

r=bzbarsky
Attachment #145338 - Flags: review?(bzbarsky) → review+
Comment on attachment 145338 [details] [diff] [review]
remove "error" from default list of allowed popup events

sr=jst
Attachment #145338 - Flags: superreview?(jst) → superreview+
(Assignee)

Updated

15 years ago
Attachment #145338 - Flags: approval1.7?

Comment 5

15 years ago
Comment on attachment 145338 [details] [diff] [review]
remove "error" from default list of allowed popup events

a=chofmann for 1.7
Attachment #145338 - Flags: approval1.7? → approval1.7+
(Assignee)

Updated

15 years ago
Status: NEW → RESOLVED
Last Resolved: 15 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla1.7final
Product: Core → Mozilla Application Suite
You need to log in before you can comment on or make changes to this bug.