many uses of mouseover event showing alert results in too much recursion
Categories
(Core :: DOM: UI Events & Focus Handling, defect)
Tracking
()
People
(Reporter: petermichaux, Unassigned)
Details
(Keywords: testcase)
Attachments
(3 files)
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.8) Gecko/20061025 Firefox/1.5.0.8 Build Identifier: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.8) Gecko/20061025 Firefox/1.5.0.8 In the following example I create a simple div with a mouseover event. When the alert appears I can rarely select "OK" by pressing enter on the keyboard. That is one strange thing. The big problem is that if I repeat this experiment many times (5 to 40) without refreshing the page I eventually see a "too much recursion" error in Firebug and Firefox freezes. Yes this is a tedious test but this is a bug. Other browsers don't do this. I have to kill the process to quit Firefox. <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN"> <html lang="en"> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <title>Firefox Bug</title> </head> <body> <div id="blue" style="margin-top:11em;background:cornflowerblue;">mouse over me many times to see an alert and after a while a "too much recursion" error in firefox.</div> <script type="text/javascript"> document.getElementById("blue").onmouseover = function(){alert("hi")}; </script> </body> </html> Reproducible: Always Steps to Reproduce: 1.Mouseover the div many times. Eventually there will be a too much recursion error. 2. 3. Actual Results: too much recursion error Expected Results: an endless series of alerts as I mouseover the div
Reporter | ||
Comment 1•18 years ago
|
||
Reporter | ||
Comment 2•18 years ago
|
||
Reporter | ||
Comment 3•18 years ago
|
||
Updated•18 years ago
|
Updated•15 years ago
|
Assignee | ||
Updated•5 years ago
|
Comment 4•3 years ago
|
||
I came from bug 1667962
(I noticed a strange "too much recursion" error and looking for similar bug reports to figure out what is going on.
I now have a suspicion something is amiss with alert-like error reporting in JS code.)
I am using FF 87.0 windows 10 64-bit as I write this.
Every time I place mouse over the said area in the sample page (actually, just viewing the attachments here triggers
JS execution.): this is a source of potential DoS in a sense. :-)
Quite natural behavior for a bug reporting system, but we may not want that happen because there can be
malicious code reported unintentionally.
Anyway, when I hover mouse on the area mentioned in the attachments,
I get a dialog that says "hi" the first time, but on the subsequent try, I get a different dialog
that also mentions if the additional/subsequent dialog should be suppressed.
So DoS is avoided in modern FF I think instead of getting the following behavior (which is indeed used by malicious website from what I understand.)
Expected Results:
an endless series of alerts as I mouseover the div
Updated•2 years ago
|
Description
•