This is an archived snapshot of W3C's public bugzilla bug tracker, decommissioned in April 2019. Please see the home page for more details.

Bug 14910 - Security: Can't a web page that calls window.stop() 1000 times a second prevent a user from leaving a page?
Summary: Security: Can't a web page that calls window.stop() 1000 times a second preve...
Status: RESOLVED WORKSFORME
Alias: None
Product: WHATWG
Classification: Unclassified
Component: HTML (show other bugs)
Version: unspecified
Hardware: Other other
: P3 normal
Target Milestone: Unsorted
Assignee: Ian 'Hixie' Hickson
QA Contact: contributor
URL: http://www.whatwg.org/specs/web-apps/...
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-11-23 14:41 UTC by contributor
Modified: 2012-07-18 18:41 UTC (History)
2 users (show)

See Also:

Attachments

Description contributor 2011-11-23 14:41:16 UTC 
Specification: http://www.whatwg.org/specs/web-apps/current-work/
Multipage: http://www.whatwg.org/C#apis-for-creating-and-navigating-browsing-contexts-by-name
Complete: http://www.whatwg.org/c#apis-for-creating-and-navigating-browsing-contexts-by-name

Comment:
Security: Can't a web page that calls window.stop() 1000 times a second
prevent a user from leaving a page?

Posted from: 2001:4c28:a030:30:48a7:889e:3c69:da08
User agent: Opera/9.80 (Windows NT 6.1; U; Edition Next; en) Presto/2.10.229 Version/12.00
Comment 1 Ian 'Hixie' Hickson 2011-12-07 23:55:05 UTC 
Yes. But then the user can just close the tab.

This is actually implemented by browsers:
   http://software.hixie.ch/utilities/js/live-dom-viewer/saved/1272