Firefox Crash Link

Post by **trolly** » December 16th, 2005, 5:02 pm

Chaosfeary wrote:Ok, so it crashes 1.0.x but not 1.5.x. That's good.
( http://maas-online.nl/security/poc-mozilla-crash.html )

Hopefully when Firefox 1.5 comes out pages will not be able to force a print popup to appear without the user clicking first, too.

Checked this link. Opens a printer popup on trunk. JS must be enabled. Page and FF is blocked while printer dialog is open.
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.9a1) Gecko/20051216 Firefox/1.6a1 ID:2005121605

Chaosfeary · Post by **Chaosfeary** » December 16th, 2005, 5:14 pm

It really should be fixed - Pages shouldn't be able to pop up a print window without user interaction - Accidental printing could be pretty easy.

Not to mention the possibility of a spam of multiple print windows or the loophole in the way Firefox handles javascript being used to pop up other things or do other things with the system o_O

Post by **trolly** » December 16th, 2005, 5:22 pm

No, it is not so critical.
- you still have to click OK for printing
- FF is blocked while the dialog is open, so spamming is not possible.

I think it can be useful to popup the print dialog e.g. for a print button. Some pages do.