Closed Bug 793255 Opened 12 years ago Closed 12 years ago

iFrame Sandbox not having allow-top-navigation still allows window.top.location change

Categories

(Firefox :: Security, defect)

Product:
Firefox
Component:
Security
Version:
17 Branch
Platform:
x86_64
Windows 7
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED DUPLICATE of bug 785310

People

(Reporter: fastest963, Unassigned)

References

Details

Changing window.top.location in an iFrame with a sandbox property not containing "allow-top-navigation" is still allowing the change. Bug 341604 adds support for the sandbox attribute and the defined tests check for an anchor tag with target="_top" but does not test window.top.location changes in JS.

Reproduced in Aurora (17.0a2 (2012-09-21)).
Blocks: framesandbox
Status: UNCONFIRMED → RESOLVED
Closed: 12 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.