835975 - Back button allows user to mistakenly go back to Web Forgery Site

Status: RESOLVED INVALID

(Firefox :: Untriaged, defect)

Description

[bryce_allen22]

User Agent: Mozilla/5.0 (Windows NT 6.0; rv:21.0) Gecko/20130129 Firefox/21.0
Build ID: 20130129030851

Steps to reproduce:

I visited a website that was deemed unsafe and a red display appeared saying Web Forgery Site, then clicked the get me out of here and works with pressing back button


Actual results:

While the page took me out of the suspicious web site, it still allowed me to accidentally go back to the website by going forward


Expected results:

Doesn't allow for user to accidentally go back to site, Just a suggestion as it seems a security risk

Comment 1

[Matthias Versen [:Matti]]

> it still allowed me to accidentally go back to the website by going forward
Do you get the warning/web forgery page again or the website without warning ?

Comment 2

[bryce_allen22]

I get the warning when i accidentally go back to the website, its just I dont think it should allow a user to view the site again maybe when it says get me out of here, it can have put in block list or stop user from pressing the forward option to accidentally go back to forgery site

Comment 3

[Matthias Versen [:Matti]]

It's not dangerous if you get the warning if you hit the back/forward button because the phishing/forgery check is done before we load the URL. there is no reason to block the back/forward button.