510250 - Pages can trigger new e-mail composer windows upon loading

Status: RESOLVED DUPLICATE of bug 167475

(Firefox :: General, defect)

Description

[Jez]

Attachment: Proof-of-concept to trigger email client via mailto onLoad

The attachment HTML file is a proof-of-concept that should cause Firefox to trigger some e-mail composer windows upon loading, because of the javascript onLoad().  For some reason, this seems to get the IFRAME that's statically coded in to the page to trigger another e-mail composer window too.

This allows an effective DoS for sites that have code to open up 100 (or whatever) e-mail composer windows, and should not be allowed to happen by default.  By the way, I've used the mailto: protocol here.  This should be a more general thing; NO external protocol links can be 'triggered' upon page load, a user has to click on something tangible on the page before a trigger can happen, and even then it should only be allowed to happen once.