Hacker News new | ask | show | jobs
by RyanZAG 4915 days ago
Don't try to open this page with Noscript enabled in Firefox - it locks up the browser. I'm guessing that without the javascript to control the CSS, everything runs amok. Seems like you could make a browser DoS attack by simply copying this page and stripping out the javascript? Might be worth a try... for science.
3 comments

I don't have NoScript and opening the page still made Firefox lock up.

Flagged the submission because of that.

Flagging the submission seems like the wrong approach - this is something Firefox needs to fix quickly. I believe some websites let you insert your own CSS in certain cases, and this could easily be abused...

There needs to be a limit on how much time can be spent trying to render CSS or a popup box asking if you want to close it similar to how javascript behaves.

Maybe an issue related to prefix free and firefox?
works on my FF18 on Linux, but the animation center is on top of the window instead of the middle.
I turned noscript off and it still locked up.