42965 - specially formed javascript: url will hang entire browser

Status: VERIFIED DUPLICATE of bug 37463

(SeaMonkey :: UI Design, defect, P3)

Description

[Christopher Blizzard (:blizzard)]

If I type javascript:location.href='http://www.redhat.com/' into the location
bar it hangs the entire browser.  If I type in javascript:location.href=http:
//www.redhat.com/ it doesn't.

Comment 1

[Christopher Blizzard (:blizzard)]

By the way - this is M16.

I also tested this in an href= link in html and it hung the browser, too.  Eep!
 I'm waiting for my tip build to finish, I'll test it there too.

Comment 2

[Brendan Eich [:brendan]]

[e-mail]'s fix didn't make it into m16 (alas and woe).  But I didn't 
know that the symptom would be a hang.  Reassigning to mitch for resolution.

/be

Comment 3

[Andreas Franke (gone)]

This sounds like a dup of mostfreq bug 37463.
But it's interesting to know that mozilla doesn't hang without the quotes.

By the way, could we use a newsgroup for bugs everybody should know about?

Comment 4

[Brendan Eich [:brendan]]

Without the quotes, the URL path is not a valid JS statement.  The http: part is 
taken to be a statement label, but the //... after it is of course a comment, 
and it's illegal to label nothing (you need at least a ; after the L: to get a 
labeled empty statement L:;).

So we know that syntax errors, which are caught early, do not result in a hang. 
That suggests that only generated documents result in a hang.  Another test to 
narrow things down: does <<javascript:void 0>> (where the test URL is bracketed 
by << and >>) hang the browser, too?

/be

Comment 5

[Andreas Franke (gone)]

Brendan, I was serious about the dup. The hang is caused by the location change.
You may want to have a look at the other bug and comment there. There is also an
analysis by jst in bug  42773. Please reopen if I am completely misunderstanding
this problem. cc self.

*** This bug has been marked as a duplicate of 37463 ***

Comment 6

[Andreas Franke (gone)]

Sorry about the tone in my last comment. It's just that I'm under a strain right
now. And thanks for the explanation about the syntax error.

Comment 7

[Brendan Eich [:brendan]]

Andreas, thanks for DUPing this -- no worries about tone.  Looks like bug 42773 
is a dup of bug 37463 (recording that here for a shortcut to the real bug).

/be

Comment 8

[sairuh (rarely reading bugmail)]

paw, d'you know who in qa should get this? i don't think it should in xp apps
either...

Comment 9

[Andreas Franke (gone)]

Bug 37463 is fixed, and "javascript:location.href='http://www.redhat.com/'"
entered into the location bar works fine now (PC/Linux, build 2000063020).

Comment 10

[Paul Wyskoczka]

Verified in build 2000071720