682640 - Error console does not have a sandbox

Status: UNCONFIRMED

(Firefox :: General, defect)

Description

[zkizzik]

User Agent: Mozilla/5.0 (Windows NT 6.1; rv:6.0) Gecko/20100101 Firefox/6.0
Build ID: 20110811165603

Steps to reproduce:

You can exit the console window of errors due to interpreting code within the same frame without a sandbox.

Examples:
Evaluate in error console (ctrl+shift+J):

alert(top.location);top.location='http://mozilla.org/';
top.location='file:///c:/';
top.location='about:config';

When you write this the error console stops responding and can not close firefox unless you stop the process:
Step1. navigate: chrome://global/content/console.xul
Step2. open error console.
Step3. restart firefox.

Can not Start or restart.


Actual results:

Cause arbitrary commands


Expected results:

nothing

Comment 1

[Mihaela Velimiroviciu (:mihaelav)]

Build identifier: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:9.0a1) Gecko/20110829 Firefox/9.0a1

I could not reproduce this issue. 

Reporter, can you please confirm whether this issue is still reproducible when you start Firefox in safe mode or with a clean profile?http://support.mozilla.com/kb/Safe+Mode http://support.mozilla.com/kb/Basic+Troubleshooting#w_8-make-a-new-profile

Thank you!

Comment 2

[Wayne Mery (:wsmwk)]

 zkizzik ?

Comment 3

[zkizzik]

here.

1 year, tested in firefox 13: http://test.drawcoders.net/bugff/poc-32.mov