Activity log for bug #90533

Date Who What changed Old value New value Message
2007-03-08 01:25:32 Jo-Erlend Schinstad bug added bug
2007-03-08 01:29:22 Jo-Erlend Schinstad description In Ubuntu Edgy, I fed Firefox an IRC URL, like irc:irc.freenode.net/mychannel. A dialog popped up, asking me how I wanted the url to be handled. I accepted the default, xchat-remote. Then Firefox started opening _lots and lots_ of tabs. When I tried to close Firefox, it asked me wether I wanted to close the 376(!) tabs. I only had one when I entered the IRC URL. I closed Firefox, but then another Firefox instance appeared and the insanity resumed. I closed that instance and another appeared, but this time I was quick and closed it right away. Then it stopped. My system slowed down significantly. I think this should actually be considered a security issue, since a script in a web page could open an irc url, causing a DoS. This is assuming Firefox won't eventually stop opening new tabs. Even if it does, the user is forced to kill firefox, loosing whatever they were doing. In Ubuntu Edgy, I fed Firefox an IRC URL, like (Don't click this yet:)) irc:irc.freenode.net/mychannel. A dialog popped up, asking me how I wanted the url to be handled. I accepted the default, xchat-remote. Then Firefox started opening _lots and lots_ of tabs. When I tried to close Firefox, it asked me wether I wanted to close the 376(!) tabs. I only had one when I entered the IRC URL. I closed Firefox, but then another Firefox instance appeared and the insanity resumed. I closed that instance and another appeared, but this time I was quick and closed it right away. Then it stopped. My system slowed down significantly. I think this should actually be considered a security issue, since a script in a web page could open an irc url, causing a DoS. This is assuming Firefox won't eventually stop opening new tabs. Even if it does, the user is forced to kill firefox, loosing whatever they were doing.
2007-03-08 01:43:10 jcfp None: statusexplanation
2007-03-08 02:33:05 John Vivirito firefox: status Unconfirmed Needs Info
2007-03-08 02:33:05 John Vivirito firefox: assignee mozilla-bugs
2007-05-07 22:44:24 Evan Klitzke bug assigned to firefox (upstream)
2007-05-08 07:12:30 Bug Watch Updater firefox: status Unknown Confirmed
2007-06-07 23:01:47 Alexander Sack firefox: status Needs Info In Progress
2008-04-09 20:13:29 Kees Cook bug added subscriber Ubuntu Security Team
2008-11-01 00:03:22 Alexander Sack firefox: status In Progress Triaged
2008-11-01 00:03:22 Alexander Sack firefox: importance Undecided Medium
2008-11-01 00:03:22 Alexander Sack firefox: statusexplanation in progress for us because upstream bug is confirmed - though old, so don't expect a quick fix for this.
2008-11-01 00:03:33 Alexander Sack firefox: assignee mozilla-bugs
2008-11-01 00:03:44 Alexander Sack bug assigned to firefox-3.0 (Ubuntu)
2008-11-01 00:03:56 Alexander Sack firefox-3.0: status New Triaged
2008-11-01 00:03:56 Alexander Sack firefox-3.0: importance Undecided Medium
2008-11-01 00:03:56 Alexander Sack firefox-3.0: statusexplanation
2009-03-10 09:31:46 John Vivirito firefox: status Triaged Won't Fix
2009-03-10 09:31:46 John Vivirito firefox: statusexplanation marked firefox 2 task as wont fix since it is EOL
2009-03-10 09:36:25 John Vivirito firefox-3.0: status Triaged Won't Fix
2009-03-10 09:36:25 John Vivirito firefox-3.0: statusexplanation This wont be fixed in firefox 2 I'm closing other firefox task due to neither this bug nor upstream have not been updated in more than a year ago
2009-03-14 05:50:48 John Vivirito bug added attachment 'bug#90533-1.png' (bug#90533-1.png)
2009-03-14 05:56:52 John Vivirito bug added attachment 'bug#90533-2.png' (bug#90533-2.png)
2010-09-17 21:38:33 Bug Watch Updater firefox: importance Unknown Wishlist
2011-10-19 16:34:33 Jamie Strandboge removed subscriber Ubuntu Security Team
2015-12-15 14:12:45 Bug Watch Updater firefox: status Confirmed Won't Fix