Closed Bug 42965 Opened 25 years ago Closed 25 years ago

specially formed javascript: url will hang entire browser

Categories

(SeaMonkey :: UI Design, defect, P3)

x86
Linux

Tracking

(Not tracked)

VERIFIED DUPLICATE of bug 37463

People

(Reporter: blizzard, Assigned: security-bugs)

Details

If I type javascript:location.href='http://www.redhat.com/' into the location bar it hangs the entire browser. If I type in javascript:location.href=http: //www.redhat.com/ it doesn't.
By the way - this is M16. I also tested this in an href= link in html and it hung the browser, too. Eep! I'm waiting for my tip build to finish, I'll test it there too.
mstoltz@netscape.com's fix didn't make it into m16 (alas and woe). But I didn't know that the symptom would be a hang. Reassigning to mitch for resolution. /be
Assignee: don → mstoltz
This sounds like a dup of mostfreq bug 37463. But it's interesting to know that mozilla doesn't hang without the quotes. By the way, could we use a newsgroup for bugs everybody should know about?
Without the quotes, the URL path is not a valid JS statement. The http: part is taken to be a statement label, but the //... after it is of course a comment, and it's illegal to label nothing (you need at least a ; after the L: to get a labeled empty statement L:;). So we know that syntax errors, which are caught early, do not result in a hang. That suggests that only generated documents result in a hang. Another test to narrow things down: does <<javascript:void 0>> (where the test URL is bracketed by << and >>) hang the browser, too? /be
Brendan, I was serious about the dup. The hang is caused by the location change. You may want to have a look at the other bug and comment there. There is also an analysis by jst in bug 42773. Please reopen if I am completely misunderstanding this problem. cc self. *** This bug has been marked as a duplicate of 37463 ***
Status: NEW → RESOLVED
Closed: 25 years ago
Resolution: --- → DUPLICATE
Sorry about the tone in my last comment. It's just that I'm under a strain right now. And thanks for the explanation about the syntax error.
Andreas, thanks for DUPing this -- no worries about tone. Looks like bug 42773 is a dup of bug 37463 (recording that here for a shortcut to the real bug). /be
paw, d'you know who in qa should get this? i don't think it should in xp apps either...
QA Contact: sairuh → paw
Bug 37463 is fixed, and "javascript:location.href='http://www.redhat.com/'" entered into the location bar works fine now (PC/Linux, build 2000063020).
Status: RESOLVED → VERIFIED
Verified in build 2000071720
Product: Core → Mozilla Application Suite
You need to log in before you can comment on or make changes to this bug.