Can malicious sites (like onlineghostaccount.com) be trapped so they don't lock up Firefox
My wife recently ended up on a malicious site (onlineghostaccount.com) that appeared to cause Firefox to lock up. I think it trapped Firefox in an endless loop, because it wasn't even possible to close the tab or change to a different one. The only thing Firefox would respond to is a button on the malicious page that would take her to a scammer claiming to be Apple support. Fortunately, she didn't fall for it, but Firefox was rendered unusable for her until I could help her fix the problem. The quick fix to get Firefox operational again by closing Firefox, shutting off network access, and then re-launching Firefox so the malicious page can't load works, but is not helpful to non-technical people like my wife, because she doesn't understand what's happening or what to do about it.
My question is: Is there any way that Firefox could detect this type of "endless loop" behavior before the page loads, prevent it from loading, and popping a warning to the user?
Thanks! S.K.Ault
ყველა პასუხი (2)
You can block these sites using Firefox's parental control or extensions: https://support.mozilla.org/en-US/kb/block-and-unblock-websites-parental-controls-firef
No, the state of the document doesn't know anything about what will happen next (e.g. if a site redirects to itself again to trigger the dialog over and over from a fresh paint in an attempt to circumvent spammy prompt countermeasures) — the UI will need to become custom, non–modal, non–blocking, and add some more options to e.g. strip the origin of permissions to raise any further dialogs. There's some cases being collected at github.com/mozilla-mobile/firefox-ios/issues/34786 to help understand what a good solution to it ought to be.