280326 - This website opens a million popups which firefox allows, these popups crash my computer!

Status: RESOLVED WORKSFORME

(Core Graveyard :: Plug-ins, defect)

Description

[Lane]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7) Gecko/20040803 Firefox/0.9.3
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7) Gecko/20040803 Firefox/0.9.3

If I visit this website
http://torrents.nimp.org/~incog/exlite/releases/exeemlite020.exe

Firefox will attempt to open many disturbing popups that eventually crash
windows.  Can you please fix the popup blocker to stop this kind of flaw or more
people will figure out the code on that site and use it for the same purpose.

Reproducible: Always

Steps to Reproduce:
1. Visit the website
http://torrents.nimp.org/~incog/exlite/releases/exeemlite020.exe
2. Experience the crashing of windows

Actual Results:  
My computer froze after nearly 300 of these disgusting popups opened.  Some
audio taunts played as well.

Expected Results:  
viewed the website and blocked it from spawning 300 popup windows.

Windows crashed the application performed fine under the conditions.  I expect
better though from a popup blocker.

Comment 1

[Mats Palmgren (inactive)]

It looks like it's Flash that opens the windows...

Comment 2

[Chris Blore]

Confirmed under Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b)
Gecko/20050128 Firefox/1.0+

Warning: if you are intending to view this site, its contents are sexually
explicit! 

Comment 3

[Justin Kerk]

This is a mirror of the infamous Last Measure script which was designed by a
group of Slashdot trolls, its official homepage is http://www.lastmeasure.com/
(the homepage does not trigger popups).

Comment 4

[John Robinson]

This kind of popup can be defeated in Firefox by going to about:config and
adding a new integer preference privacy.popups.disable_from_plugins with value 2
or 3. (Cribbed from
http://www.petebevin.com/archives/2005/03/10/firefox_popups.html ). I'd just
like to know why there's no user interface for this preference and it's not set
by default. Oh and why when I updated my Firefox (from 1.0.4 to 1.0.6?) it
disappeared from my preferences. Anyway that's a whole other bug report.

Comment 5

[Lane]

(In reply to comment #4)
> This kind of popup can be defeated in Firefox by going to about:config and
> adding a new integer preference privacy.popups.disable_from_plugins with value 2
> or 3. (Cribbed from
> http://www.petebevin.com/archives/2005/03/10/firefox_popups.html ). I'd just
> like to know why there's no user interface for this preference and it's not set
> by default. Oh and why when I updated my Firefox (from 1.0.4 to 1.0.6?) it
> disappeared from my preferences. Anyway that's a whole other bug report.

John's link gives you an integer you can Add to Firefox's config page and it
succesfully blocks these buggers.  So for now this problem is fixed although it
would be nice to have this option in the control panel.

Comment 6

[Jason Bassford]

No new code was checked into Mozilla to allow this, that I can see.  It looks
like the preference already existed.

-> WORKSFORME