486480 - may be Security/UX issue

Status: VERIFIED DUPLICATE of bug 61098

(Firefox :: General, defect)

Description

[L. Mohan Arun]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1b3) Gecko/20090305 Firefox/3.1b3
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1b3) Gecko/20090305 Firefox/3.1b3

This is a new type of security issue, which can be exploited by malicious websites. In this case it is just an April Fool's site. Try closing the tab.

Reproducible: Always

Steps to Reproduce:
1. Go to URL http://thekickback.com/rickroll/rickroll.php
2. Once video starts playing, try closing the tab.

Actual Results:  
Javascript windows keep poppping up.

Expected Results:  
There should be an option in all Javascript generated dialogs by web pages, to "stop all scripts on this page"

Exploitable issue that can cause frustration, annoyance if put to use by malicious sites preventing people from leaving the site.

If given URL doesnt work try this
http://xrl.us/benhmb

Comment 1

[Ria Klaassen (not reading all bugmail)]

Without trying it, I guess this is a duplicate of bug 61098 or one of its duplicates. Please reopen if this isn't the case.

Comment 2

[L. Mohan Arun]

Its the same bug, but unfortunately I visited the site, and I killed FF using Task manager, on reopening, it starts the same site again! I remember seeing once where FF asked me whether I wanted to "restore last session" but this option was not available this time, so I had to kill the process again and restart. May be this is enhancement request for "always ask whether to restore last session that ended unexpectedly"