258084 - Visiting this site triggers popups from a gator.com website.

Status: RESOLVED DUPLICATE of bug 219064

(Firefox :: General, defect)

Description

[Kevin]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.7) Gecko/20040803 Firefox/0.9.3
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.7) Gecko/20040803 Firefox/0.9.3

I'm not sure if this is a bug per se or just that some clever pop-up writers
have finally gotten their brains wrapped around Firefox, but in the past week
alone, I've had ~10 popups successfully make it through my friendly shielding
(AKA Firefox (0.9.3))!

To duplicate it, this example that breaks thru flawlessly for me everytime on
W2K3 Server: http://www.fandando.com (a domain squatter on a typo of fandango.com)

I have not yet personally duplicated this on WinXP or other versions, but I've
heard rumor verbally that it happens (at least in WinXP, too.)

Reproducible: Always
Steps to Reproduce:
1.visit www.fandando.com
2.observe popup
3.shudder

Actual Results:  
popups for Gator happen

Expected Results:  
No popup should have been shown.

Comment 1

[Ryan Polk (Quark)]

The website you specifically referred to is using the setTimeout exploit.
The script source is @
http://ads1.revenue.net/v?site_id=12169&pplacement_id=1&r_num=82109571 and
contains "setTimeout("self.focus();",delay);"

*** This bug has been marked as a duplicate of 219064 ***