392555 - Enter key in Navigation/Address and FindFast bar is handled by JavaScript of website

Status: RESOLVED WORKSFORME

(Firefox :: Keyboard Navigation, defect)

Description

[IJsbrand Oudshoorn]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a8pre) Gecko/2007081605 Minefield/3.0a8pre
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a8pre) Gecko/2007081605 Minefield/3.0a8pre

The site contains JavaScript listening to the onkeyup event (see http://www.cs.aau.dk/~normark/oop-07/html/notes/javascript/lenonavigate.js).
This script reacts when window.event.keyCode == 13 by loading the next logical page of this site.

If the Enter key is used in the address or find bar, the script is still working and leading me to its own next logical page instead of browsing me to the site a requested or the find results.

Workaround: Use clicking the Goto-button or Search-button, right of the input boxes.

Reproducible: Always

Steps to Reproduce:
1. goto http://www.cs.aau.dk/~normark/oop-07/html/notes/intro-csharp_themes-csharp-c-sect.html
2. type in address bar www.google.com
3. press Enter (don't Click)
Actual Results:  
goes to http://www.cs.aau.dk/~normark/oop-07/html/notes/intro-csharp_themes-csharp-java-sect.html

Expected Results:  
seeing www.google.com frontpage

Reproduced in:
* Minefield 3.0a8pre (nightly build / latest trunk, 16-Aug-2007 09:12) on Windows XP
* Firefox 2.0.0.6 on Windows XP
* Firefox 2.0.0.4 on SUSE Linux 10.1

Comment 1

[Marco Bonardo [:mak]]

reproduced in:
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a8pre) Gecko/2007081810 Minefield/3.0a8pre
Mozilla/5.0 (Windows; U; Windows NT 6.0; it; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6

confirming, this could be a problem if a malware website intercept user interaction and brings them where it wants

Comment 2

[Jesse Ruderman]

I can't reproduce using Mac trunk.

A simpler testcase would be nice.  Can the site see all the characters typed into the address bar or just the Enter press?

Comment 3

[IJsbrand Oudshoorn]

Attachment: Test case.

This file will show a message box (JavaScript alert) when a key is pressed.
I've tried to type in the address bar, only on the Enter it key (code 13) it will show the message box.

Comment 4

[IJsbrand Oudshoorn]

(In reply to comment #2)
> A simpler testcase would be nice.
See my attachment.

> Can the site see all the characters typed
> into the address bar or just the Enter press?
As far as I've tried, only the Enter press is captured.

Comment 5

[IJsbrand Oudshoorn]

Some other things I discovered.

* The key is handled after navigating to the URL entered.

* The key is NOT handled when navigating to an non existing file in the "file://" zone.

Comment 6

[Damien]

Reproduce on Firefox 3.6.14pre for Ubuntu (on Xubuntu) 
But it's fixed in Firefox 4.0b9pre (from 29/12/2010)

Comment 7

[Matthew N. [:MattN]]

I also can't reproduce this problem with:
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:9.0a1) Gecko/20110919 Firefox/9.0a1

Comment 8

[IJsbrand Oudshoorn]

It is also fixed in:
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:6.0.2) Gecko/20100101 Firefox/6.0.2

So I don't see any reason to keep this ticket open.