Closed
Bug 383382
Opened 18 years ago
Closed 12 years ago
alerts can appear over the wrong window
Categories
(Core :: DOM: Core & HTML, defect)
Tracking
()
RESOLVED
WORKSFORME
People
(Reporter: mrbkap, Unassigned)
Details
(Keywords: sec-low, Whiteboard: [sg:low spoof])
Attachments
(1 file)
236 bytes,
text/html
|
Details |
We've done some work in the past to ensure that alerts always appear over the page that called alert. However, by using |alert(window.open(...) && "foo")| it's possible to get around the current fixes.
Reporter | ||
Updated•18 years ago
|
Whiteboard: [sg:low spoof]
Reporter | ||
Comment 1•18 years ago
|
||
The original fix to bring the alert()ing tab to the foreground was for bug 262887.
Reporter | ||
Comment 2•18 years ago
|
||
Jesse asked some pointed questions that led to the following conclusions:
- The window.open call does not have to be *in* the call to alert. So:
window.open("http://www.mozilla.org");
alert("Hello, world");
shows the same behavior.
- The testcase works on Linux whether or not you divert new windows to tabs.
- The testcase only works on Windows if you divert new windows to tabs.
Comment 3•13 years ago
|
||
Dolske, is this still valid? What are the cases where alert() still produces a dialog?
Comment 4•12 years ago
|
||
Because we have now per tab alerts, this is wfm.
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → WORKSFORME
Updated•9 years ago
|
Group: core-security → core-security-release
Updated•7 years ago
|
Group: core-security-release
Assignee | ||
Updated•6 years ago
|
Component: DOM → DOM: Core & HTML
You need to log in
before you can comment on or make changes to this bug.
Description
•