No subject


Tue May 3 15:05:30 PDT 2016


<ManDay> Shouldn't webkit/epiphany have a popup-spam protection of some sorts? I'm filling out an online form at ESA which was apparently written by some genious web-designer... once you enter more than 60 characters in the field "Education : Major Subjects" you are stuck in an infinite alert() loop
<ManDay> http://appform.esa.int/was-html/VNApplicationForm.htm?VN=ESA/YG-ESTEC(2016)063
<ManDay> (same happens for firefox, but there the javascript cannot be intercepted in the debugger, either, which is why i tried epiphany)



Indeed. It seems that if a page starts creating javascript alert() notifications without stopping the only solution is to *kill* the *whole* browser.
Is not even possible to close the bad tab :(


I found this old related bug  https://bugs.webkit.org/show_bug.cgi?id=17560

Not sure if is viable to implement this protection on webkitgtk+ itself. But that would be ideal.

-- 
You are receiving this mail because:
You are the assignee for the bug.
--1479836091.7836e1.16312
Date: Tue, 22 Nov 2016 09:34:51 -0800
MIME-Version: 1.0
Content-Type: text/html

<html>
    <head>
      <base href="https://bugs.webkit.org/" />
    </head>
    <body><table border="1" cellspacing="0" cellpadding="8">
        <tr>
          <th>Bug ID</th>
          <td><a class="bz_bug_link 
          bz_status_NEW "
   title="NEW - [GTK] JavaScript alert() DOS protection"
   href="https://bugs.webkit.org/show_bug.cgi?id=165032">165032</a>
          </td>
        </tr>

        <tr>
          <th>Summary</th>
          <td>[GTK] JavaScript alert() DOS protection
          </td>
        </tr>

        <tr>
          <th>Classification</th>
          <td>Unclassified
          </td>
        </tr>

        <tr>
          <th>Product</th>
          <td>WebKit
          </td>
        </tr>

        <tr>
          <th>Version</th>
          <td>WebKit Nightly Build
          </td>
        </tr>

        <tr>
          <th>Hardware</th>
          <td>Unspecified
          </td>
        </tr>

        <tr>
          <th>OS</th>
          <td>Unspecified
          </td>
        </tr>

        <tr>
          <th>Status</th>
          <td>NEW
          </td>
        </tr>

        <tr>
          <th>Severity</th>
          <td>Normal
          </td>
        </tr>

        <tr>
          <th>Priority</th>
          <td>P2
          </td>
        </tr>

        <tr>
          <th>Component</th>
          <td>WebKit Gtk
          </td>
        </tr>

        <tr>
          <th>Assignee</th>
          <td>webkit-unassigned&#64;lists.webkit.org
          </td>
        </tr>

        <tr>
          <th>Reporter</th>
          <td>clopez&#64;igalia.com
          </td>
        </tr>

        <tr>
          <th>CC</th>
          <td>bugs-noreply&#64;webkitgtk.org
          </td>
        </tr></table>
      <p>
        <div>
        <pre>From #webkitgtk+:

&lt;ManDay&gt; Shouldn't webkit/epiphany have a popup-spam protection of some sorts? I'm filling out an online form at ESA which was apparently written by some genious web-designer... once you enter more than 60 characters in the field &quot;Education : Major Subjects&quot; you are stuck in an infinite alert() loop
&lt;ManDay&gt; <a href="http://appform.esa.int/was-html/VNApplicationForm.htm?VN=ESA/YG-ESTEC(2016)063">http://appform.esa.int/was-html/VNApplicationForm.htm?VN=ESA/YG-ESTEC(2016)063</a>
&lt;ManDay&gt; (same happens for firefox, but there the javascript cannot be intercepted in the debugger, either, which is why i tried epiphany)



Indeed. It seems that if a page starts creating javascript alert() notifications without stopping the only solution is to *kill* the *whole* browser.
Is not even possible to close the bad tab :(


I found this old related bug  <a class="bz_bug_link 
          bz_status_UNCONFIRMED "
   title="UNCONFIRMED - Repeated JavaScript alerts block user interaction with application"
   href="show_bug.cgi?id=17560">https://bugs.webkit.org/show_bug.cgi?id=17560</a>

Not sure if is viable to implement this protection on webkitgtk+ itself. But that would be ideal.</pre>
        </div>
      </p>
      <hr>
      <span>You are receiving this mail because:</span>
      
      <ul>
          <li>You are the assignee for the bug.</li>
      </ul>
    </body>
</html>
--1479836091.7836e1.16312--


More information about the webkit-unassigned mailing list