All users were logged out of Bugzilla on October 13th, 2018

document.write can write to loaded document

RESOLVED DUPLICATE of bug 243392

Status

()

RESOLVED DUPLICATE of bug 243392
15 years ago
15 years ago

People

(Reporter: bugzilla, Assigned: security-bugs)

Tracking

Trunk
x86
Windows 2000
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(URL)

(Reporter)

Description

15 years ago
User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; cs-CZ; rv:1.7) Gecko/20040514
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; cs-CZ; rv:1.7) Gecko/20040514

When the page is loaded very slowly and the user click on some link, Mozilla can
execute document.writeln() from the first location in the second location.


The good and every times workign example of one Czech blogger is here
http://www.chose.cz/mozilla-js-test/
But because it is in Czech, I have create EN example
http://www.penguin.cz/~met/pub/bug/loc.php (the script delayes are by the php
sleep() fucntion) - but unfortunatelly it does not working for 100% - only
sometimes ;-( - propably it depends on the delays, I don't know.

Reproducible: Always
Steps to Reproduce:
1. Load http://www.penguin.cz/~met/pub/bug/loc.php
2. Click on the link before the page is loaded
3. In the new page look for the text 'Something written from the loc1.php'
and
4. If this does not work try the same on http://www.chose.cz/mozilla-js-test/
(but it is in Czech).
Please try a recent nightly.

*** This bug has been marked as a duplicate of 243392 ***
Status: UNCONFIRMED → RESOLVED
Last Resolved: 15 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.