854902 - Dubious popup dialog on page-exit, has only OK button.

Status: RESOLVED DUPLICATE of bug 560767

(Firefox :: Untriaged, defect)

Description

[dk_fedorabugs]

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:19.0) Gecko/20100101 Firefox/19.0
Build ID: 20130311191316

Steps to reproduce:

Visited http://marketbuzzreport.com/php?code=ARMH and then tried to leave the page by clicking on a bookmark in my sidebar.


Actual results:

The attempt to leave the page was blocked and showed a popup dialog which only had an OK button, and no close button.


Expected results:

I don't think I should be prevented from leaving a page with one click, and I'm worried about clicking OK on a dialog popup from what is a site with dubious behavior.

Comment 1

[dk_fedorabugs]

The technology which pops up the dialog is from a site called exitsplash.com (this is even mentioned in the dialog).  Here is their description of the technology:  http://www.exitsplash.com/index2.php

Comment 2

[Paul Silaghi, QA [:pauly]]

The page is designed to do so when trying to leave.
Right click/View page source:

<script language="javascript">if(typeof jQuery=='undefined'){var head=document.getElementsByTagName('head')[0];var script=document.createElement('script');script.src='http://ajax.googleapis.com/ajax/libs/jquery/1.5.0/jquery.js';script.type='text/javascript';head.appendChild(script);}var PreventExitSplash = false;var ESRecordId = '1';var exitpagerb = 2;var exitperiodrb = 0;var periodEnable = 0;var peroidDisable = 0;var displayFrequency = '';var ExitSplashLocation = 'http://www.hotpennystockstowatch.us/wp-content/plugins/exitsplash/';var exitsplashpage = 'exit/exit.php';var exitsplashmessage = '***************************************\n\n W A I T   B E F O R E   Y O U   G O !\n\n   CLICK THE *Stay on this page* BUTTON OR\n     THE *CANCEL* BUTTON RIGHT NOW\n     TO STAY ON THE CURRENT PAGE.\n\n I GOT SOMETHING FOR YOU THAT YOU WON\'T BELIEVE!\n\n***************************************\n\n(C) ExitSplash.com\n';var alertmessage = '***************************************\n\n         > > > W A I T < < <\n\n CLICK THE ***Stay on this page*** BUTTON\n    OR CLICK THE ***Cancel*** BUTTON\n    on the NEXT Window for Something\n          You WON\'T Believe!\n\n***************************************\n\n(C) ExitSplash.com\n';var UseAlert = 1;var UseAudio = 1;var UseHelper = 1;var AudioRB = 'http://www.hotpennystockstowatch.us/wp-content/plugins/exitsplash/files/exitsplash7.mp3';</script>

Comment 3

[dk_fedorabugs]

I don't think this is an invalid bug.  When clicking on the "Leave Page" of the second dialog box, I expect to go to the URL of the bookmark which I originally clicked or specified in the location bar.  Instead I am taken to another page which I didn't specify ( http://marketbuzzreport.com/exit/exit.php ).  The problem is that this new page could have been written to have a similar leave-prevention mechanism. (Thankfully, this example site is not that nefarious.)  An endless prompt-on-leave+redirect could prevent me from ever moving away from a particular page or set of pages, if the web site designer so desired.  I don't think this should be allowed, and I think "Leave Page" should put me directly on the URL which the I originally requested from the click/bookmark/locationbar.  Please re-open this bug.

Comment 5

[Jesse Ruderman]

(In reply to dk_fedorabugs from comment #1)
> The technology which pops up the dialog is from a site called exitsplash.com
> (this is even mentioned in the dialog).  Here is their description of the
> technology:  http://www.exitsplash.com/index2.php

A business whose purpose is to help web sites exploit onbeforeunload >_<

* Bug 636905 - onbeforeunload without interaction
* Bug 560767 - onbeforeunload navigation
* Bug 856977 - onbeforeunload alert

These are all tracked by the 'eviltraps' metabug, bug 432687.

Comment 6

[Jesse Ruderman]

Attachment: exit.js