Bug 165032
| Summary: | [GTK] JavaScript alert() DOS protection | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Carlos Alberto Lopez Perez <clopez> |
| Component: | WebKitGTK | Assignee: | Nobody <webkit-unassigned> |
| Status: | RESOLVED DUPLICATE | ||
| Severity: | Normal | CC: | bugs-noreply, mcatanzaro |
| Priority: | P2 | ||
| Version: | WebKit Nightly Build | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| See Also: |
https://bugs.webkit.org/show_bug.cgi?id=17560 https://bugs.webkit.org/show_bug.cgi?id=162243 |
||
Carlos Alberto Lopez Perez
From #webkitgtk+:
<ManDay> Shouldn't webkit/epiphany have a popup-spam protection of some sorts? I'm filling out an online form at ESA which was apparently written by some genious web-designer... once you enter more than 60 characters in the field "Education : Major Subjects" you are stuck in an infinite alert() loop
<ManDay> http://appform.esa.int/was-html/VNApplicationForm.htm?VN=ESA/YG-ESTEC(2016)063
<ManDay> (same happens for firefox, but there the javascript cannot be intercepted in the debugger, either, which is why i tried epiphany)
Indeed. It seems that if a page starts creating javascript alert() notifications without stopping the only solution is to *kill* the *whole* browser.
Is not even possible to close the bad tab :(
I found this old related bug https://bugs.webkit.org/show_bug.cgi?id=17560
Not sure if is viable to implement this protection on webkitgtk+ itself. But that would be ideal.
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
Michael Catanzaro
*** This bug has been marked as a duplicate of bug 164853 ***