Bug 56850 – Browsing cnn.com adds ad URLs to history

• Component: Page Loading
• Status: UNCONFIRMED

[Jon]

Browsing cnn.com adds several garbage URLs to Safari's history for me in ToT. Most of them are ad URLs that were never clicked on. Here's a sample copied from Safari's history. Let me know if there's something more useful I can post.

http://www.adfusion.com/adfusion.partnersite/categoryhtml.aspx?userfeedguid=c97e9baf-d238-42e0-bdd2-10cbd46e8b7c&pid=1&clickTag=http://ads.cnn.com/event.ng/Type%3dclick%26FlightID%3d352736%26AdID%3d484575%26TargetID%3d77299%26Segments%3d730,2247,2743,2823,3285,9496,9779,9781,9853,10381,16113,17173,17251,18517,18982,19419,30220,30363,30550,30582,30708,31677,31746,31777,31939,32375,32594,33852,35306,35605,36376,36664,36809,37123,38203,39377,39378,39416,40149,40253,41850,42274,43109,43475,43581,43778,44383,45266,45319,45351,45424,45497,45557,45604,45611,45797,45799,46026,46101,46104,46163,46183,46265,46439,46469,46484,46485,46486,46694,46768,46792,46800,46953,47090,47114,47151,47353,47362,47399,47486,47603,47648,47656,47672,47766,47805,47870%26Values%3d1588%26Redirect%3d
http://ads.cnn.com/html.ng/site=cnn&cnn_pagetype=main&cnn_position=126x31_spon9&cnn_rollup=homepage&page.allowcompete=yes&params.styles=fs&transactionID=5598666362454016&tile=9137418180031&domId=210633
http://d3.zedo.com/jsc/d3/ff2.html?n=1197;c=34;s=7;d=9;w=300;h=250;l=http://ads.cnn.com/event.ng/Type=click&FlightID=358643&AdID=494838&TargetID=112745&Segments=730,2247,2743,2823,3285,9496,9779,9781,9853,10381,13087,13088,13090,13303,16113,16337,17173,17251,18517,18904,18982,19419,23793,25505,25508,25512,25519,25538,25544,25550,29699,29776,30207,30220,30550,31073,31626,31677,31746,32375,32594,32736,32825,33852,34253,35306,36103,36315,36376,36664,37123,38202,38203,38295,38588,39377,39378,39416,40149,40253,40607,41850,42274,42837,43109,43475,43581,43778,44299,44383,45025,45265,45266,45319,45351,45424,45427,45497,45557,45604,45611,45797,45799,45979,46026,46101,46104,46163,46183,46265,46439,46469,46484,46485,46486,46694,46768,46792,46800,46871,46883,46953,46999,47087,47090,47114,47151,47218,47353,47363,47399,47486,47600,47603,47648,47672,47766,47805,47861,47862,47870,47943&Values=1588&Redirect=
http://www.cnn.com/.element/ssi/www/breaking_news/3.0/banner.html?&csiID=csi1
http://ads.cnn.com/html.ng/site=cnn&cnn_pagetype=main&cnn_position=1x1_bot&cnn_rollup=homepage&page.allowcompete=yes&params.styles=fs&transactionID=5598666362454016&tile=9137418180031&domId=638159
http://serve.directdigitalllc.com/serve.php?bid=19&t202id=85029&click=http://yads.zedo.com/ads2/c%3Fa%3D887077%3Bx%3D2335%3Bg%3D172%3Bc%3D1197000034%2C1197000034%3Bi%3D9%3Bn%3D1197%3Bi%3D9%3Bu%3D8OeITeZMgI@hiX85id2kIYkm%7E032211%3B1%3D11%3B2%3D1%3Be%3Di%3Bs%3D7%3Bg%3D172%3Bw%3D25%3Bm%3D130%3Bz%3D0.33162842225283384%3Bp%3D6%3Bf%3D1070973%3Bh%3D840708%3Bk=http%3A//ads.cnn.com/event.ng/Type%3Dclick%26FlightID%3D358643%26AdID%3D494838%26TargetID%3D112745%26Segments%3D730%2C2247%2C2743%2C2823%2C3285%2C9496%2C9779%2C9781%2C9853%2C10381%2C13087%2C13088%2C13090%2C13303%2C16113%2C16337%2C17173%2C17251%2C18517%2C18904%2C18982%2C19419%2C23793%2C25505%2C25508%2C25512%2C25519%2C25538%2C25544%2C25550%2C29699%2C29776%2C30207%2C30220%2C30550%2C31073%2C31626%2C31677%2C31746%2C32375%2C32594%2C32736%2C32825%2C33852%2C34253%2C35306%2C36103%2C36315%2C36376%2C36664%2C37123%2C38202%2C38203%2C38295%2C38588%2C39377%2C39378%2C39416%2C40149%2C40253%2C40607%2C41850%2C42274%2C42837%2C43109%2C43475%2C43581%2C43778%2C44299%2C44383%2C45025%2C45265%2C45266%2C45319%2C45351%2C45424%2C45427%2C45497%2C45557%2C45604%2C45611%2C45797%2C45799%2C45979%2C46026%2C46101%2C46104%2C46163%2C46183%2C46265%2C46439%2C46469%2C46484%2C46485%2C46486%2C46694%2C46768%2C46792%2C46800%2C46871%2C46883%2C46953%2C46999%2C47087%2C47090%2C47114%2C47151%2C47218%2C47353%2C47363%2C47399%2C47486%2C47600%2C47603%2C47648%2C47672%2C47766%2C47805%2C47861%2C47862%2C47870%2C47943%26Values%3D1588%26Redirect%3D
http://ads.cnn.com/html.ng/site=cnn&cnn_pagetype=main&cnn_position=300x100_bot1&cnn_rollup=homepage&page.allowcompete=no&params.styles=fs&transactionID=5598666362454016&tile=9137418180033&domId=384575
http://ads.cnn.com/html.ng/site=cnn&cnn_pagetype=main&cnn_position=300x100_bot3&cnn_rollup=homepage&page.allowcompete=no&params.styles=fs&transactionID=5598666362454016&tile=9137418180033&domId=201357
http://ads.cnn.com/html.ng/site=cnn&cnn_pagetype=main&cnn_position=300x100_bot2&cnn_rollup=homepage&page.allowcompete=no&params.styles=fs&transactionID=5598666362454016&tile=9137418180033&domId=965361
http://ads.cnn.com/html.ng/site=cnn&cnn_pagetype=main&cnn_position=300x250_rgt&cnn_rollup=homepage&page.allowcompete=yes&params.styles=fs&transactionID=5598666362454016&tile=9137418180032&domId=824136
http://svcs.cnn.com/weather/getForecast?time=1&mode=json_html&zipCode=87901&locCode=NM12&celcius=false&csiID=csi2
http://www.cnn.com/.element/ssi/auto/3.0/sect/MAIN/facebook_rec.wrapper.html?&csiID=csi3
http://ads.cnn.com/html.ng/site=cnn&cnn_pagetype=main&cnn_position=230x250_adlinks&cnn_rollup=homepage&page.allowcompete=yes&params.styles=fs&transactionID=5598666362454016&tile=9137418180031&domId=825207
about:blank
http://ads.cnn.com/html.ng/site=cnn&cnn_pagetype=main&cnn_position=120x90_bot1&cnn_rollup=homepage&page.allowcompete=yes&params.styles=fs&transactionID=5598666362454016&tile=9137418180032&domId=972525

[Alexey Proskuryakov]

<rdar://problem/9171965>

[Brady Eidson]

Extremely helpful steps:
-Finding a specific URL that one can visit that will always reproduce the problem.
-Do a search through old versions of nighties to find a range where this started to occur.

[Mihai Parparita]

I'm not able to reproduce this with the nightly build at r81689. Where did you see these extra URLs (History menu or the standalone history page?)

[Tony Gentilcore]

I'm not able to readily reproduce this either. But those do appear to be a list of the subframes on cnn.com (from browsing window.frames[i].location.href). So assuming this bug is legit, then somehow subframe navigations are getting on the history stack.

[Brady Eidson]

We've certainly seen that type of bug before, but right now I also can't reproduce this...  we need more specific information from Jon on what versions of Webkit and Safari he's using...

[Jon]

I'm currently trying to bisect a different bug, so I'll have to get back to you on the specific builds and reproduction steps. It was, however, a recent ToT release build running through Safari 5.0.4 on Snow Leopard.