EEdge allows page to prevent closing tab/window by repeatedly showing alerts in onload

Fixed, not yet flighted Issue #5420578

Details

Created
Nov 13, 2015
Privacy
This issue is public.
Reports
Reported by 0 people

Sign in to watch or report this issue.

Steps to reproduce

URL:

Repro Steps:

This is a lightly-edited version of the fraudulent page to produce a minimal example. Also has nasty tricks for IE10.

Expected Results:

It should not be possible for a site to prevent closing a tab.

Suggested fixes (any of the below):
Count the number of alert() calls within a given time and offer to close the tab for the user after a limit is exceeded.
forbid use of alert() in onload
Allow force-closing a tab which is showing an alert. “This site is asking for confirmation before closing. Do you want to close the tab anyway?”

Actual Results:

Dev Channel specific:

No

Attachments

0 attachments

    Comments and activity

    • Microsoft Edge Team

      Changed Assigned To to “Sermet I.”

      Changed Assigned To from “Sermet I.” to “Forbes H.”

      Changed Status to “Confirmed”

      Changed Assigned To from “Forbes H.” to “IE S.”

      Changed Status from “Confirmed” to “Fixed, not yet flighted”

      Changed Assigned To from “IE S.” to “Forbes H.”

      Changed Status from “Fixed, not yet flighted” to “Confirmed”

      Changed Assigned To from “Forbes H.” to “IE S.”

      Changed Status from “Confirmed” to “Fixed, not yet flighted”

    You need to sign in to your Microsoft account to add a comment.

    Sign in