Open Bug 995628 Opened 10 years ago Updated 2 years ago

DDos from the browser through Web Worker

Categories

(Core :: DOM: Workers, defect, P5)

Product:
Core
Component:
DOM: Workers
Version:
28 Branch
Platform:
x86
Windows XP
Type:
defect

Tracking

()

Status:
UNCONFIRMED

People

(Reporter: skyskif, Unassigned)

Details

Attachments

(3 files)

test.rar
711 bytes, application/x-rar
Details
1.htm
825 bytes, text/html
Details
demo_workers.js
186 bytes, application/javascript
Details
Attached file test.rar — 
User Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.116 Safari/537.36

Steps to reproduce:

1.Opened 1.htm

2.Clicked "Start Worker"


Actual results:

1. Browser does no longer work properly.

2. CPU usage 100%

3. Website have  thousands "get" requests

4. After closing 1.htm "Web Worker" does not stop and continues to send "get" requests.


Expected results:

In browser, no built-in functions stop "Web Worker"
Attached file 1.htm — 

    
    

    
  

      
      
      
      

        Attached file
          
        demo_workers.js
        — 
      

    


  

    
  
Group: core-security
Component: Untriaged → DOM: Workers
Product: Firefox → Core
Priority: -- → P5

    
  
Severity: normal → S3

          You need to log in
          before you can comment on or make changes to this bug.
        






  

    
  







  

    

      
Attachment

      

      
      
      
      
    

    

      

        

          

            
General

            

              Creator: 



            

            
Created: 

            
Updated: 

            
Size: