| Summary: | Window title updates make taskbar unusable on X11 thin client (remote DoS by Javascript) | ||
|---|---|---|---|
| Product: | [Unmaintained] plasma4 | Reporter: | Bodo Eggert <7eggert> |
| Component: | widget-taskbar | Assignee: | Plasma Bugs List <plasma-bugs-null> |
| Status: | RESOLVED UNMAINTAINED | ||
| Severity: | crash | CC: | hein |
| Priority: | NOR | ||
| Version First Reported In: | unspecified | ||
| Target Milestone: | --- | ||
| Platform: | Other | ||
| OS: | Linux | ||
| URL: | data:text/html,<script>setInterval(function(){document.title=(new Date).toString()}, 1000);</script> | ||
| Latest Commit: | Version Fixed/Implemented In: | ||
| Sentry Crash Report: | |||
Hello! This bug report was filed for KDE Plasma 4, which reached end-of-support status in August 2015. KDE Plasma 5's desktop shell has been almost completely rewritten for better performance and usability, so it is likely that this bug has already been resolved in Plasma 5. Accordingly, we hope you understand why we must close this bug report. If the issue described here is still present in KDE Plasma 5.12 or later, please feel free to open a new ticket in the "plasmashell" product after reading https://community.kde.org/Get_Involved/Bug_Reporting If you would like to get involved in KDE's bug triaging effort so that future mass bug closes like this are less likely, please read https://community.kde.org/Get_Involved#Bug_Triaging Thanks for your understanding! Nate Graham |
I've got a thin client connecting to my main system (Debian Jessie), which is running KDE 4.14.2, using "X -query 192.168. ...". The TC is noticeably slow but almost fast enough for using gimp. When a program, e.g. a browser running some javascript, updates it's title once per second, the task manager becomes unusable, using the mouse may become impossible. Previously I used Debian Woody, I never noticed that problem there. Reproducible: Always Steps to Reproduce: 0. Use a thin client, "X11 -query hostname" 1. open URL data:text/html,<script>setInterval(function(){document.title=(new Date).toString()}, 1000);</script> (tested with conqueror and Opera 12, opera seems to have a stronger effect) 2. Open any other window 3. Try to switch windows using the mouse on the task bar Actual Results: I could neither close any window nor switch tasks. Sometimes I could not use the mouse either, i think it was due to a window group popup. If I'm able to use the keyboard, I'm able to close the tab causing the window title updates. Sometimes it's just slow, sometimes it's faster to reboot the thin client (losing the X session and unsaved data if there was any). Expected Results: Same as when no window titles are occurring, just normal task switching.