I have created a demonstration page on my website at Note that you must have javascript enabled for the demo to work. Even checking the “Prevent this page from creating additional dialogs” does not work because I bypassed that with a simulated mouse click on the page, which I think is novel part.Ī malicious person could use this to keep you on a page and keep loading ads/exploits or they could try some social engineering and keep pestering a user for login names and passwords to their e-mail/social sites/banking/etc… I have tested this on Google Chrome 5 and it basically hobbles the browser and prevents you from doing anything. I think I created a new bypass (if that is the right word) for Google Chrome that allows a devious person to create an infinite number of prompt/alert/confirm modal dialogue boxes using javascript.
0 kommentar(er)
