Open
Bug 861671
Opened 12 years ago
Updated 2 years ago
IFRAME tag makes browser unresponsive
Categories
(Core :: DOM: Core & HTML, defect, P5)
Tracking
()
NEW
People
(Reporter: shaheemirza, Unassigned)
References
(Blocks 1 open bug)
Details
(Keywords: csectype-dos)
Attachments
(3 files)
User Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.64 Safari/537.31
Steps to reproduce:
I have attached a PoC.
Thank You.
|
Reporter | |
Comment 1•12 years ago
|
||
If you think, i have submitted this issue in a wrong category, please, change the category.
This is a DoS that should likely be sec-low marking sec-bounty -
Flags: sec-bounty-
|
|
Reporter | |
Comment 5•12 years ago
|
||
:D
|
||
Updated•12 years ago
|
Component: Untriaged → DOM
Product: Firefox → Core
|
||
Updated•12 years ago
|
Attachment #737294 -
Attachment mime type: application/octet-stream → application/java-archive
|
|
||
Updated•12 years ago
|
|
||
Comment 6•12 years ago
|
||
So the basic testcase is:
<iframe onload="window.location = ''"></iframe>
right?
Or even simpler:
<iframe onload="window.location.reload()"></iframe>
?
|
||
Comment 7•11 years ago
|
||
Yeah, looks like that.
|
||
Updated•6 years ago
|
Priority: -- → P5
|
Assignee | |
Updated•6 years ago
|
Component: DOM → DOM: Core & HTML
|
||
Updated•2 years ago
|
Severity: normal → S3
You need to log in
before you can comment on or make changes to this bug.
Description
•