401982 - using embedded visits, a site could affect your autocomplete results

Status: RESOLVED DUPLICATE of bug 509961

(Firefox :: Bookmarks & History, defect)

Description

[(not reading, please use [e-mail] instead)]

using embedded visits, a site could affect your autocomplete results

in firefox 3, for bug #389491, I made it so we order results by visit count.

chatting with dietrich in bug #401722, you'll see that embedded visits affect visit count.

an evil page (if loaded once) could take silently take advantage of this by loading itself in hidden iframes to force itself up higher on your autocomplete list.

we will "age out" autocomplete results over time, so perhaps I'm worrying about nothing here?

Comment 1

[Mike Beltzner [:beltzner, not reading bugmail]]

This does not block the final release of Firefox 3.

Comment 2

[Gervase Markham [:gerv]]

Bug 451915 - move Firefox/Places bugs to Firefox/Bookmarks and History. Remove all bugspam from this move by filtering for the string "places-to-b-and-h".

In Thunderbird 3.0b, you do that as follows:
Tools | Message Filters
Make sure the correct account is selected. Click "New"
Conditions: Body   contains   places-to-b-and-h
Change the action to "Delete Message".
Select "Manually Run" from the dropdown at the top.
Click OK.

Select the filter in the list, make sure "Inbox" is selected at the bottom, and click "Run Now". This should delete all the bugspam. You can then delete the filter.

Gerv

Comment 3

[Jesse Ruderman]

Dup of bug 509961?

Comment 4

[Jesse Ruderman]

Dup of bug 578879?