513550 - URL I supplied should demonstrate when attempting to close the tab, site takes over browser

Status: RESOLVED DUPLICATE of bug 61098

(Firefox :: General, defect)

Description

[SheekLuch]

User-Agent:       Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.1) Gecko/20090717 Remi/fc10 Firefox/3.5.1
Build Identifier: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.1) Gecko/20090717 Remi/fc10 Firefox/3.5.1

I visited the site (url I provided above) after searching for a particular item on google, when I didn't find what I was looking for on the site I attempted to close the tab and return to searching. However, the site refused to allow firefox to close the tab and kept opening new tabs, constantly resizing firefox, moving firefox around. I ran top on the command line and firefox shot up to 63 percent in cpu usage. I did a kill pid and because of session store after assumed crash, it reopen the same tabs and the problem persisted. After my second kill pid, firefox had problems reopening the tabs and I finally took back control of the browser. I would consider this some information I thought you guys would like to have since there are allot sites out there that use these types of advertising scheme. Also I could only imagine what it would have done in MS Windows, probably get a BSOD if you couldn't kill it on time.... 

I also had allot prompts asking me 'Are you sure you want to navigate away from this site', hitting cancel doesn't do anything. I got the firefox quit, cancel, or save and exit dialog after repeatedly clicking on the x button to quit. I hit quit and the prompt I mention above returned and as cancel doesn't do anything it continued to go through what it was doing.

Reproducible: Didn't try

Steps to Reproduce:
1. Visit the site in question

Actual Results:  
Unable to leave site, takes complete control of the browser and becomes unresponsive to any of my commands. It never crashed, just went loopy, unless I'd let it continue. . 

Expected Results:  
To leave the site, I think firefox should prompt an user that the site is attempting to open a tab. Gives an option to say no and close the tab.

Comment 1

[SheekLuch]

Attachment: Build config

Comment 2

[Ria Klaassen (not reading all bugmail)]

I think this is a "two in one" bug and that is not allowed to be confirmed.
The moving and resizing window happens because you allow it. The option can be turned on and off in Tools > Options > Content > JavaScript > Advanced > Move or resize existing Windows. 
The other issue seems to be a duplicate of Bug 61098.
So if you choose for the first issue this bug is WORKSFORME. There are also other bugs that only want to allow move & resize under certain circumstances.
If you think the other issue is more important, you can resolve this bug as a duplicate of Bug 61098.

Comment 3

[SheekLuch]

I can see why you said it's a 'two in one' bug... Doesn't really seem like a security threat, however if it wasn't for my trust in a linux kernel... There is a possibility, unexpectedly visiting those sites can make you to lose control of your system. It would be nice to have a barrier against this issue or atleast a fallback. The move and resize feature is needed to some of the sites I visit.