Closed Bug 295995 Opened 20 years ago Closed 19 years ago

Can reroute trusted events

Categories

(Firefox :: Security, defect)

Product:
Firefox
Component:
Security
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED INVALID

People

(Reporter: pop2.bugzilla, Unassigned)

Details

(Whiteboard: [sg:needinfo]) 

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.8) Gecko/20050511
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.8) Gecko/20050511

I can reroute trusted events to any other window

Reproducible: Always

Steps to Reproduce:
<script>
var frm;
function init() {
  frm=frames[0];
  frm.document.designMode='on';
}
function reroute(evt) {
  frm.focus();
}
</script>
<body onload="init()" onclick="reroute(event)">
<iframe />
Actual Results:  
When typing something, everything is routed to the hidden iframe without
informing the user.

Expected Results:  
Trusted events shouldn't be reroutable without permission.
This doesn't look like a security hole to me.  The code in comment 0 doesn't
appear to be rerouting trusted events to chrome or another site, but rather
simply changing focus to an iframe.  Why is this a security hole?  Am I missing
something?
Whiteboard: [sg:needinfo]
I can't get this testcase to do anything, in fact. Perhaps it was trimmed too
much from something larger?
Group: security
Status: UNCONFIRMED → RESOLVED
Closed: 19 years ago
Resolution: --- → INVALID
You need to log in before you can comment on or make changes to this bug.