Bug 107967 - trouble with Yahoo's "Most Popular"
Summary: trouble with Yahoo's "Most Popular"
Status: RESOLVED DUPLICATE of bug 104656
Alias: None
Product: konqueror
Classification: Applications
Component: khtml parsing (show other bugs)
Version: unspecified
Platform: unspecified FreeBSD
: NOR normal
Target Milestone: ---
Assignee: Konqueror Developers
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2005-06-23 03:51 UTC by mi+kde
Modified: 2006-06-16 18:44 UTC (History)
0 users

See Also:
Latest Commit:
Version Fixed In:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description mi+kde 2005-06-23 03:51:42 UTC
Version:           3.4.0 (using KDE 3.4.0, compiled sources)
Compiler:          gcc version 3.4.2 [FreeBSD] 20040728
OS:                FreeBSD (amd64) release 5.4-STABLE

To, what I'm talking about, go to

	http://my.yahoo.com/

and click on any news story.

On the story's page, there will be a top bar with several "tab-like" links, one of which will read "Most Popular".

Click on that link. The page you get will try to reload itself every few minutes using some funky JavaScript.

On the first such reload attempt, you will get a "Page Not Found" error from Yahoo! The link in the URL area will be totally bogus -- something like:

	http://news.yahoo.com/i/name=

This does not happen with neither Mozilla nor IE, which Yahoo, no doubt, tested against...
Comment 1 Thiago Macieira 2005-06-25 17:39:37 UTC
I can confirm that.
Comment 2 Maksim Orlovich 2005-08-12 00:51:05 UTC
Not JavaScript:
<META HTTP-EQUIV="refresh" CONTENT="300>
<meta name="description" content="Use Yahoo! News to find the news stories and photos being emailed, viewed and highest rated by readers.">

Note that missing quote. whee. Ffox parses this same as us, but maybe they have some quirk in the actual content parsing. Will find out in 5 minutes

Comment 3 mi+kde 2005-08-12 01:43:56 UTC
This may also mean, there is a security hole in Konqueror somewhere. If a missing quote leads it to such such strange behaviour (where is the http://news.yahoo.com/i/name= coming from??), what will it do given a specially crafted input?
Comment 4 Allan Sandfeld 2006-06-16 14:13:45 UTC
I cannot reproduce the bug anymore
Comment 5 mi+kde 2006-06-16 16:48:30 UTC
Yes, because Yahoo! fixed their page faster, than KDE fixed their browser...
Comment 6 Allan Sandfeld 2006-06-16 18:44:37 UTC

*** This bug has been marked as a duplicate of 104656 ***