961374 - Can't close a malicious tab (onbeforeunload abuse)

Status: RESOLVED DUPLICATE of bug 636374

(Firefox :: Untriaged, defect)

Description

[bier]

User Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:26.0) Gecko/20100101 Firefox/26.0 (Beta/Release)
Build ID: 20131205075310

Steps to reproduce:

This tab cannot be closed by any means.

http://policia.es.id203948203948203948.p250632.com/




Actual results:

The tab can't be closed.


Expected results:

The tab should close.

Comment 1

[kajou]

Several versiosn of this web page exists.

http://polfed-fedpol.be.id481796243-2232736469.k769943.com/?flow_id=9022&173897=69893/case_id=75540

The only way to close this page is to:

Comment 2

[kajou]

It seems that several versions of this web page exists

http://polfed-fedpol.be.id481796243-2232736469.k769943.com/

The only ways i found to get rid of this page is to hit the "Quit" button like a hundred times or to kill the firefox process.

The Greasymonkey script "Disable - remove onbeforeunload" (https://userscripts.org/scripts/show/121551) don't work in this case.

Strictly speaking this is not a Firefox bug, but, like said in the title, a Javascript abuse because this can be replicated in IE too.

Comment 3

[Jim Jeffery not reading bug-mail 1/2/11]

Likely a dupe of bug 950336 or bug 616853

Comment 4

[Dave Garrett]

Fixed with bug 636374.