563804 - Possible to detect protocol + domain of a different-origin window from same-origin exception message

Status: RESOLVED DUPLICATE of bug 549459

(Core :: Security, defect)

Description

[David Bloom]

User-Agent:       Opera/9.80 (Windows NT 5.1; U; en) Presto/2.5.24 Version/10.53
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 (.NET CLR 3.5.30729)

The exceptions thrown for setting certain properties of different_origin_window.location contain the protocol and domain of that window, which could be used to spy on the domains users visit as they browse the web.

Reproducible: Always

Steps to Reproduce:
1. Open the attached firefox_domain_spy.zip/test.html in Firefox 3.6 or above.
2. Click the button
3. Navigate the web in the main window.
Actual Results:  
The popup window is able to detect the protocol and domain name of the pages the user navigated to.

Expected Results:  
The popup window not to be able to detect that information.

Comment 1

[David Bloom]

Attachment: demonstration of the vulnerability