Bug 81215 - Infinite browser loop via Refresh headers
Summary: Infinite browser loop via Refresh headers
Status: UNCONFIRMED
Alias: None
Product: WebKit
Classification: Unclassified
Component: Page Loading (show other bugs)
Version: 420+
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Nobody
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2012-03-15 06:41 PDT by Niels Heinen
Modified: 2012-03-15 10:33 PDT (History)
1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Niels Heinen 2012-03-15 06:41:17 PDT 
Refresh headers allow browser redirection but unlike 3xx redirects, there is no limit.  
This can cause infinite loops when two servers give responses where the Redirect headers point to each other. 

HTTP/1.0 200 OK
Refresh: 0; url=http://server2


HTTP/1.0 200 OK
Refresh: 0; url=http://server1

The loops suck CPU and some screen flickering so --> not the most user-friendly ;-)
Perhaps it can be considered enforce a maximum Refresh limit in order to counter these loops?  
Niels