mozilla-mobile / firefox-ios

Firefox for iOS
Mozilla Public License 2.0
12.23k stars 2.94k forks source link

JS can cause a tab switch between PBM vs. normal tabs #23109

Open data-sync-user opened 2 days ago

data-sync-user commented 2 days ago

Note: this was originally filed as a Bugzilla, additional notes and details are available on that ticket: https://bugzilla.mozilla.org/show_bug.cgi?id=1921442

Steps:

  1. Open a private tab (any website).
    1. Ensure that your Close Private Tabs setting is off
  2. Switch to a normal tab Visit a page with the attached Javascript (see Bugzilla ticket attachment)
  3. Switch back to private tab

Result: the JS results in the client switching between PBM and normal browsing tabs. This is probably not something that should be allowed as it will be jarring/confusing for users.

┆Issue is synchronized with this Jira Bug

data-sync-user commented 1 day ago

➤ Andres Furlan commented:

Filippo Zazzeroni should we add this one to DMA Stability too?

data-sync-user commented 1 day ago

➤ Matt Reagan commented:

Andres Furlan Filippo Zazzeroni FYI this is most likely not an issue users will typically hit during common browsing. The example Javascript was written with the intention of causing a bug in the client, so AFAICS it’s unlikely that ordinary webpages would be causing a similar issue. (We should fix either way, but I’m guessing this can probably be considered lower priority than the other DMA stability tasks).

data-sync-user commented 23 hours ago

➤ Filippo Zazzeroni commented:

Matt Reagan Thanks to point this up, then maybe we can add it Andres Furlan to DMA but with lower priority