263635 - script from site opens javascript console

Status: RESOLVED DUPLICATE of bug 243170

(Toolkit Graveyard :: Error Console, defect)

Description

[Peter van der Woude [:Peter6]]

Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.3) Gecko/20041009
Firefox/0.10

repro:
1. open http://www.emule-france.com/index.php
2. go to the "home" image (image name = p_header_minilogo2.gif ) in the top-right.
3. press on it.
4. the javascript console pops up with the message
--Error: this.setHomePage is not a function--

script doing this is:

document.write('<a href="javascript:"
onclick="javascript:this.style.behavior=\'url(#default#homepage)\';this.setHomePage(\'http://www.emule-france.com/\')"><IMG
SRC="http://www.emule-france.org/images/p_header_minilogo2.gif" BORDER=0
WIDTH="30" HEIGHT="20" ALT="faire de emule-france ma page de démarrage"
align="absbottom"></a>');

exp:
an external site should not be able to open the javascript console.

Comment 1

[Peter van der Woude [:Peter6]]

Attachment: testcase

open testcase and click on "click here"

Comment 2

[Martijn Wargers (dead)]

Related to bug 243170, maybe even a duplicate.

Comment 3

[Peter van der Woude [:Peter6]]

(In reply to comment #2)
> Related to bug 243170, maybe even a duplicate.
I agree Martijn
scr="javascript:" is the common part.

Duping this one



*** This bug has been marked as a duplicate of 243170 ***