[Webkit-unassigned] [Bug 164853] [GTK] Handle infinite popup dialogs exploit

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=164853

Carlos Alberto Lopez Perez <clopez at igalia.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |mrowe at bdash.net.nz

--- Comment #10 from Carlos Alberto Lopez Perez <clopez at igalia.com> ---
(In reply to comment #8)
> >It seems this issue affects also safari / the mac port.
> 
> Back in 2008, Mark Rowe (bdash) thought apple should handle the problem with
> the interface being locked out on their own and seems to have reported it
> upstream: <rdar://problem/5767363>
> 
> The report is against webkit/safari and I don't think the bug was checked
> against epiphany at that time: https://bugs.webkit.org/show_bug.cgi?id=17560
> 
> I am unable to log in to apple's bugtracker and can't get any information
> about how they handled it. My guess is that they found a way to work around
> the interface lockout in their browser without considering fixing the
> problem in webkit.

The safari solution is a half-backed one.

The safari UI is not blocked by the pop-up, but the webview of that tab is.

You have to close the tab, you can't just stop the popup without closing it.

I find chromium/firefox solution of adding a check-box with a "prevent this page from creating additional dialogs" option much better.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20161215/347ca17b/attachment.html>