298020 - popup s with bad coded javascript are not blocked

Status: RESOLVED DUPLICATE of bug 282931

(Firefox :: Security, defect)

Description

[jimmy.witherspoon]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.8) Gecko/20050511 Firefox/1.0.4
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.8) Gecko/20050511 Firefox/1.0.4

Popups using "bad" javascript are not blocked.  The following script will not be
blocked (notice the formatting of SCRIPT)
document.write('<scr'+'ipt language=javascript
src="http://SPAMalot.com/run_some_script_that_has_popups.js+((new
Date()).getTime() % 2147483648) + Math.random()+'"></scr'+'ipt>');

Reproducible: Always

Steps to Reproduce:
place the following code into a page

Actual Results:  
popup windows

Expected Results:  
detected the '<scr'+'ipt tags and kill them

Comment 1

[Peter van der Woude [:Peter6]]

i'm not sure what you are talking about, but it looks like nonsense

INVA ?

Comment 2

[José Jeria]

Please attach a testcase showing this issue by uplading it via this link:
https://bugzilla.mozilla.org/attachment.cgi?bugid=298020&action=enter

Comment 3

[zug_treno]

See bug 295616, bug 286615 and bug 265186 -> Duplicate of Core bug 282931?

Comment 4

[zug_treno]

Also see bug 282382.

Comment 5

[:Gavin Sharp [email: [e-mail]]]

*** This bug has been marked as a duplicate of 282931 ***