Closed Bug 329710 Opened 19 years ago Closed 17 years ago

address the fragment attack

Categories

(Toolkit :: Safe Browsing, defect)

Product:
Toolkit
Component:
Safe Browsing
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED FIXED

People

(Reporter: fritz, Unassigned)

Details

We iterate over docs checking to see if their URL matches a known bad URL that we have. We should accommodate fragments in the URL (eg, http://evil.com/index.html#foo) so we it's not trivial for a page to avoid detection by immediately re-naving the user to the URL with that fragment.
QA Contact: nobody → safe.browsing
Stripping the fragment is part of url canonicalization for the list lookup, so this shouldn't be an issue anymore.
Status: NEW → RESOLVED
Closed: 17 years ago
Resolution: --- → FIXED
Product: Firefox → Toolkit
You need to log in before you can comment on or make changes to this bug.