Closed
Bug 911600
Opened 12 years ago
Closed 12 years ago
Uncloseable Window due to iframe window.onbeforeunload
Categories
(Firefox :: Untriaged, defect)
Tracking
()
RESOLVED
DUPLICATE
of bug 636374
People
(Reporter: mail, Unassigned)
Details
Attachments
(1 file)
|
770 bytes,
application/java-archive
|
Details |
User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:23.0) Gecko/20100101 Firefox/23.0 (Beta/Release)
Build ID: 20130814063812
Steps to reproduce:
If an iframe contains a window.onbeforeunload script, it will be executed once the user chooses to close the window. If there are more than one iframe, all of them will be executed. Combined with an iframe-create-loop, this results in an almost uncloseable window (depending on the number of iterations used in the loop). This method is currently used in-the-wild, trying to force users to install a forged adobe flash updater. Also works in Chrome (fixed in v30/31 #282878) & IE. I attached a zip-file with a small demo.
Actual results:
Webpage asks over and over whether the page should be closed.
Expected results:
Just ask one time and then close the window.
|
||
Updated•12 years ago
|
Attachment #798325 -
Attachment mime type: application/octet-stream → application/java-archive
|
|
||
Comment 1•12 years ago
|
||
This looks like the same trick, if not the same attack, as bug 909020
Group: core-security
Status: UNCONFIRMED → RESOLVED
Closed: 12 years ago
Resolution: --- → DUPLICATE
You need to log in
before you can comment on or make changes to this bug.
Description
•