Bug 349345 - Window title updates make taskbar unusable on X11 thin client (remote DoS by Javascript)
Summary: Window title updates make taskbar unusable on X11 thin client (remote DoS by ...
Status: RESOLVED UNMAINTAINED
Alias: None
Product: plasma4
Classification: Unmaintained
Component: widget-taskbar (other bugs)
Version First Reported In: unspecified
Platform: Other Linux
: NOR crash
Target Milestone: ---
Assignee: Plasma Bugs List
URL: data:text/html,<script>setInterval(fu...
Keywords:
Depends on:
Blocks:
 
Reported: 2015-06-18 17:30 UTC by Bodo Eggert
Modified: 2018-06-08 18:37 UTC (History)
1 user (show)

See Also:
Latest Commit:
Version Fixed/Implemented In:
Sentry Crash Report:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Bodo Eggert 2015-06-18 17:30:10 UTC
I've got a thin client connecting to my main system (Debian Jessie), which is running KDE 4.14.2, using "X -query 192.168. ...". The TC is noticeably slow but almost fast enough for using gimp.

When a program, e.g. a browser running some javascript, updates it's title once per second, the task manager becomes unusable, using the mouse may become impossible.

Previously I used Debian Woody, I never noticed that problem there.

Reproducible: Always

Steps to Reproduce:
0. Use a thin client, "X11 -query hostname"
1. open URL data:text/html,<script>setInterval(function(){document.title=(new Date).toString()}, 1000);</script>
(tested with conqueror and Opera 12, opera seems to have a stronger effect)
2. Open any other window
3. Try to switch windows using the mouse on the task bar

Actual Results:  
I could neither close any window nor switch tasks.
Sometimes I could not use the mouse either, i think it was due to a window group popup.
If I'm able to use the keyboard, I'm able to close the tab causing the window title updates.
Sometimes it's just slow, sometimes it's faster to reboot the thin client (losing the X session and unsaved data if there was any).

Expected Results:  
Same as when no window titles are occurring, just normal task switching.
Comment 1 Nate Graham 2018-06-08 18:37:04 UTC
Hello!

This bug report was filed for KDE Plasma 4, which reached end-of-support status in August 2015. KDE Plasma 5's desktop shell has been almost completely rewritten for better performance and usability, so it is likely that this bug has already been resolved in Plasma 5.

Accordingly, we hope you understand why we must close this bug report. If the issue described  here is still present in KDE Plasma 5.12 or later, please feel free to open a new ticket in the "plasmashell" product after reading https://community.kde.org/Get_Involved/Bug_Reporting

If you would like to get involved in KDE's bug triaging effort so that future mass bug closes like this are less likely, please read https://community.kde.org/Get_Involved#Bug_Triaging

Thanks for your understanding!

Nate Graham