DO NOT REPLY [Bug 17832] New: - Nasty customer javascript causes cascading reloads of same page from client

[bu...@apache.org]

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=17832>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=17832

Nasty customer javascript causes cascading reloads of same page from client

           Summary: Nasty customer javascript causes cascading reloads of
                    same page from client
           Product: Apache httpd-2.0
           Version: 2.0.44
          Platform: Sun
        OS/Version: Other
            Status: NEW
          Severity: Normal
          Priority: Other
         Component: Core
        AssignedTo: bugs@httpd.apache.org
        ReportedBy: glenn@apache.org


When we upgraded to Apache 2.0 we found that a javascript one of our customers
uses can cause a big problem.  The javascript would cause the remote browser to
go into an infinite loop reloading the same page. This is especially nasty if
the page being reloaded is a CGI script or a request which is processed by an
applicaiton server like Tomcat. We have contacted our customer and had them
remove the nasty javascript.

With Apache 1.3 this same javascript did not seem to trigger this problem.

Apache 2.0 seems less robust in handling this type of problem than Apache 1.3.

Here is a copy of the javascript in case you are interested.  It triggered
this problem primarily in IE 5.5 and 6.0.

function MM_reloadPage(init) {  //reloads the window if Nav4 resized
  if (init==true) with (navigator) {
     if ((appName=="Netscape")&&(parseInt(appVersion)==4)) {
         document.MM_pgW=innerWidth; document.MM_pgH=innerHeight;
         onresize=MM_reloadPage;
     }
  }
  else if (innerWidth!=document.MM_pgW || innerHeight!=document.MM_pgH) 
     location.reload();
}
MM_reloadPage(true);

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org