465183 - Change another website content.

Status: RESOLVED WORKSFORME

(Firefox :: Security, defect)

Description

[prettywolf]

User-Agent:       Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 1.1.4322; .NET CLR 2.0.50727)
Build Identifier: firefox2.0.0.16 and all firefox and all ie.

I open a company website,it have a iframe tab named :notice.
Now I open another website(no matter in new tab or new window),it have link,the target is:notice.I click the link.
OK.The content of notice in company website is changed!

Reproducible: Always

Steps to Reproduce:
code in Additional Information 
1.Open company.htm
2.Open deception.htm and click the link.
Actual Results:  
company.htm is change by you click.


company.htm:
[code]
<center>Welcome to our company website</center>
<iframe name="notice" src="notice.htm" width=200 height=400></iframe>
[/code]
notice.htm
[code]
Congratulation our company have good performance this year!
[/code]
deception.htm
[code]
<a href="content.htm" target="notice">images</a>
[/code]
content.htm
[code]
I announced:our company to go out of business!
[/code]

Comment 1

[prettywolf]

I try to contact microsoft technical support.They said they can't reproduce this problem.

Comment 2

[prettywolf]

I hope someone will pay attention to this problem.

Comment 3

[Wladimir Palant]

If I understand the problem correctly, this is by design. The "target" attribute works across windows. I don't see it said like this in the HTML spec but that's how many web pages expect it - a new window should be able to change a frame in the page that opened it.

Note that due to security considerations that only works for web pages from the same site. If you have a document with frames from foo.com and a window from bar.come, that window will not be able to load something into a frame on foo.com.

Comment 4

[prettywolf]

Sorry,I only test on local before.
Now http://mydiy.pconline.com.cn have a iframe.
http://www.foo.com/deception.htm(only '<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=465183" target="left">images</a>'>
when I click images link.firefox work ok.But microsoft IE have problem.
If you have fried in microsoft ie develop group,please tell them.
HaHa....

Comment 5

[Tyler Downer [He/Him]]

Based on last comment, resolving WFM.