337645 - Some popups appear

Status: RESOLVED INCOMPLETE

(Firefox :: Security, defect)

Description

[Darko Veberic]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.2) Gecko/20060419 Fedora/1.5.0.2-1.2.fc5 Firefox/1.5.0.2 pango-text
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.2) Gecko/20060419 Fedora/1.5.0.2-1.2.fc5 Firefox/1.5.0.2 pango-text

popups keep appearing. there is a firefox message that popups have been blocked but the still keep appearing, mostly when the window goes out of focus or tabs are changed...

Reproducible: Always

Steps to Reproduce:
1. insert some word in the dictionary search
2. the popup block message should appear
3. popup should be found below the firefox window

Comment 1

[u88484]

What dictionary search? Your going to have to provide a url for us to test.

Comment 2

[Darko Veberic]

i did, the url is in the URL: section of the bug.

Comment 3

[Jesse Ruderman]

WFM, I don't get popups at http://dictionary.reference.com.

Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.9a1) Gecko/20060509 Minefield/3.0a1

Comment 4

[Darko Veberic]

try some more searches until the smileys add pops up.

Comment 5

[Philip Withnall (unavailable)]

Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9a1) Gecko/20060510 Minefield/3.0a1 - Build ID: 0000000000
WFM.
Can you reproduce this in safe mode? (http://kb.mozillazine.org/Safe_Mode)

Comment 6

[Philip Withnall (unavailable)]

Can you reproduce this with the latest official Mozilla release of Firefox? (1.5.0.3)

Comment 7

[Darko Veberic]

yes. happens with 1.5.0.3 too.

i was slightly off with "reproducible: always". it seems popups get through only for certain ads (smileys) that appear more or less random (try more reloads). what is interesting is that the add is popped-up only when some mouse action is done, like switching the tabs, focusing another window, clicking a menu or search area etc...

Comment 8

[Philip Withnall (unavailable)]

When you get one of these popups, could you note down the URL of the page in the popup window, and then see if you can find any references to it or popup windows in the dictionary page's Javascript?

Comment 9

[Darko Veberic]

Attachment: this source opens a popup that avoids blocking

this source (search.htm) causes firefox to display popup blocking yellow stripe, but when some mouse action is done (like tab switch, mouse changing focus, menu click etc) the popup from http://a.tribalfusion.com is opened (see source of the popup in the next attachement).

Comment 10

[Darko Veberic]

Attachment: source of the popup

and this appears when the previous attachement is viewed...

Comment 11

[Darko Veberic]

i have attached two files, a html source that causes the popup to appear after mouse action, and the source of the resulting popup. url of the first source is http://dictionary.reference.com/search?q=some and the url of the popup is http://a.tribalfusion.com/p.media/ESLLUQKIMHOLGAHKGVNRKCPGSJMPWTGSNRIIRNKGPRRPUJHOGDHNNLJLFKHSWOLOSMODPMEDQP/271626/pop.html

best, darko.

Comment 12

[Philip Withnall (unavailable)]

Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9a1) Gecko/20060526 Minefield/3.0a1 - Build ID: 0000000000
WFM. Are you sure those attachments (as they are on the Bugzilla server) reproduce the popups for you?

Comment 13

[Darko Veberic]

i have just saved the two sources when the smiley popup appeared. i do not have a clue whether the sources are true cause or not. you are the expert. i just want to help improve popup blocking. maybe the page is reloaded in the meanwhile. i guess some trickery is in the works since the popup blocker bar is displayed first (nothing happens at this point), then after some mouse action, the popup appears...

i spent 10min reloading this dictionary with different search keywords and i could not reproduce the popup. it seems all depends on the current theme prefered by the add server. till now only smileys from tribalfusion come through. this may explain why it is always WFM for you...

Comment 14

[Philip Withnall (unavailable)]

Yes, but if you open https://bugzilla.mozilla.org/attachment.cgi?id=223477, does the popup still appear?

Comment 15

[Darko Veberic]

i guess the one that eludes the bloking does not appear every time since the add site supplies them randomly...

Comment 16

[Darko Veberic]

since the http://dictionary.reference.com/ site has been updated lately and i have moved to firefox 1.5.0.7 the annoying smiley add still opens up. but in a slightly different way. first, entering dictionary word displays the stuff. nothing happens at this point. then i switched to another desktop workplace and i was promptly switched back to the one containing firefox. this was strange. as i switched back to the workplace i intended in the first place there was the popup with smileys right in the middle... spooky. it seems the popup appears as triggered by some mouse/window/whatnot action... javascript?

Comment 17

[Tyler Downer [He/Him]]

There has been no activity here recently. Does this appear with Firefox 3.0.4 and the new dictionary website?

Comment 18

[u88484]

Resolving incomplete as no comments have been added in almost a year to confirm if the bugs still exists or does not and I can't reproduce this.

Comment 19

[Darko Veberic]

something similar still happens with the version

Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.0.11) Gecko/2009060309 Ubuntu/9.04 (jaunty) Firefox/3.0.11

if you go to the link
http://web2.cylex.de/firma-home/hobby-haug-modellbau---fachgeschaeft-3286077.html
and do an x-selection (x11 clipboard) of some text there on the page, the ad.adnet.de popup will appear after mouse button is released...

Comment 20

[Tyler Downer [He/Him]]

darko, does it happen with an official build of Firefox 3.5 or later?

Comment 21

[Darko Veberic]

beats me. i will tell you as soon as firefox in jaunty is updated to 3.5 ...

Comment 22

[Ian Stirling.]

On testing under 3.0.12 with a frewh profile under linux, I could not reproduce this bug. 
The first site gives 2 popups shown by the popup blocker banner, but none appear.

On the site mentioned in #19 - popups do indeed appear.

Confirming as the bug outlined in the title occurs.