Closed Bug 793255 Opened 7 years ago Closed 7 years ago

iFrame Sandbox not having allow-top-navigation still allows window.top.location change

Categories

(Firefox :: Security, defect)

17 Branch
x86_64
Windows 7
defect
Not set

Tracking

()

RESOLVED DUPLICATE of bug 785310

People

(Reporter: fastest963, Unassigned)

References

Details

Changing window.top.location in an iFrame with a sandbox property not containing "allow-top-navigation" is still allowing the change. Bug 341604 adds support for the sandbox attribute and the defined tests check for an anchor tag with target="_top" but does not test window.top.location changes in JS.

Reproduced in Aurora (17.0a2 (2012-09-21)).
Blocks: framesandbox
Status: UNCONFIRMED → RESOLVED
Closed: 7 years ago
Resolution: --- → DUPLICATE
Duplicate of bug: 785310
You need to log in before you can comment on or make changes to this bug.