RE: MSIE7 browser entrapment vulnerability (probably Firefox, too)

Tested on Opera 9.20 build 8713 with JRE 1.5 resulting in the following behaviour: After loading the initial site http://lcamtuf.coredump.cx/ietrap/ I couldn't navigate away to google.com etc, however Opera correctly displayed http://lcamtuf.coredump.cx/ietrap/ in the address bar, thus no real...

MSIE7 browser entrapment vulnerability (probably Firefox, too)

There is a cool combination-type vulnerability in MSIE7 that allows the attacker to: a Trap the visitor in a Matrix-esque tarpit webpage that cannot be left by normal means this is a known brain-damaged design of onUnload Javascript handlers, b Spoof transitions between pages so that the user...