262660 - limit javascript window resizes and repositions

Status: RESOLVED DUPLICATE of bug 579174

(Firefox :: General, enhancement)

Description

[Jason Smethers]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; rv:1.7.3) Gecko/20041001 Firefox/0.10.1
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; rv:1.7.3) Gecko/20041001 Firefox/0.10.1

A mallicious javascript program may try to irritate a user by repositioning
a browser window constantly.

Reproducible: Always
Steps to Reproduce:
1. Go to the given URL




Expected Results:  
Repositioning and resizing should be one of the three:
1. Rate limited
2. Limited to a maximum count per page view
3. Configurable for enable/disable

Comment 1

[Brendan Eich [:brendan]]

File bugs in the right component, please -- "JavaScript Engine" has nothing to
do with window sizes and repositions.

/be

Comment 2

[Boris Zbarsky [:bzbarsky]]

> 3. Configurable for enable/disable

It is, in Mozilla (which is what you filed this bug on).
Preferences > Advanced > Scripts and Windows, set sites to not be able to resize
or reposition windows.

Over to firefox to add UI for this pref as desired.

Comment 3

[Sergey Sokoloff]

Firefox has a pref in Tools --> Options --> Web Features --> Enable JavaScript
--> Advanced --> Move or resize existing win...

Probably it's just that the pref is truncated and thus TOO SHORT to be legible?
"win..." does not necessary mean "windows".

Comment 4

[Thomas Bertels]

It is possible to completely disable javascript window resizes but you don't
want to it because then some legitime popup windows aren't viewed correctly
(they can't be resized then they stay small and unreadable).
And the problem is some sites switch the window size from "maximized" to "normal
window" without reason.
It would be perfect to be able to disable only this the sites to do so.
The script used by such sites seems to be :
self.resizeTo(screen.availWidth,screen.availHeight)