Closed Bug 540151 Opened 15 years ago Closed 15 years ago

DoS by alert() modal

Categories

(Firefox :: General, defect)

x86_64
Linux
defect
Not set
critical

Tracking

()

RESOLVED DUPLICATE of bug 61098

People

(Reporter: bugzilla, Unassigned)

Details

Attachments

(1 file)

User-Agent:       Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.6) Gecko/20091216 Iceweasel/3.5.6 (like Firefox/3.5.6; Debian-3.5.6-1)
Build Identifier: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.6) Gecko/20091216 Iceweasel/3.5.6 (like Firefox/3.5.6; Debian-3.5.6-1)

a modal dialog disables interfacing with everything except the dialog so when an alert() is put into an infinite loop, you are stuck until you kill the application.

someone unfixed this problem from a previous version.  -_-;

Reproducible: Always

Steps to Reproduce:
1. go to http://adaptivetime.com/itsatrap.html
2. click the "It's perfectly safe to click this button." button
3. panic
Actual Results:  
an alert box with "Are you having a flashback to 1998 yet?" shows up and you cannot access any other part of the GUI to navigate away from the page.  clicking "OK" only leads to the same alert message box returning before you can do anything.  YOU ARE STUCK!

Expected Results:  
an alert box with "Are you having a flashback to 1998 yet?" shows up and you cannot access other parts of the GUI to navigate away from the page.

this is the most rudimentary DoS attack that _needs_ to be fixed.
Attached file demo alert() trap
Status: UNCONFIRMED → RESOLVED
Closed: 15 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: