Comments (8)
label bug
sounds good.
from brave-ios.
@jumde hi, you classified this issue as a bug, then removed bug. Can you please let me know if this is a bug or an enhancement as I am making sure all tickets are correctly labeled to help with reporting?
from brave-ios.
The app is susceptible to js DOS attack especially the window.alert attack. The alert shown blocks the entire screen.
For other bowsers following is the result:
FF: same as brave
Safari: custom alert component
Chrome: Blocking alert with option to suppress window.alert after multiple alerts are thrown
Possible solutions for this DOS attack is either of Chrome's or Safari's way.
from brave-ios.
@danishjafri88 We need a way to suppress, the Chrome flow works well.
from brave-ios.
Verification passed on iPhone XR with iOS 13 running 1.12(19.09.04.23)
- Verified app doesn't hang when constant popups show up
- Verified selecting
Ok
orCancel
doesn't cause app to hang - Verified
Suppress notifications
only affect for that particular session and doesn't show up again until the tab is closed and reopened
Verification PASSED on iPad Air 3rd Generation iOS 13.1
running 1.12 (19.09.10.18)
:
- Verified app doesn't hang when constant popups show up
- Verified selecting
Ok
orCancel
doesn't cause app to hang - Verified
Suppress notifications
only affect for that particular session and doesn't show up again until the tab is closed and reopened
from brave-ios.
@danishjafri88 quick question regarding this fix. Whenever you suppress the modal/dialog/alerts, the page becomes unresponsive. Example:
- open #770 in a new tab
- tap on https://dustiest-limitation.000webhostapp.com/alert.html
- suppress the alert and you'll notice that the page becomes unresponsive and appears as it's still attempting to load. Tapping on the
X
to stop the load doesn't do anything. You'll need to basically close the tab and re-open.
Is the above expected? Or should the page recover once you suppress the alerts?
from brave-ios.
@kjozwiak that expected. More discussion on this here: https://bravesoftware.slack.com/archives/C06UXF3KJ/p1567691573119300
from brave-ios.
Verification passed on iPhone 7+ with iOS 12.4.1 running 1.12(19.09.13.06)
- Verification passed on https://www.guyrutenberg.com/wp-content/uploads/2007/11/alertloop.html
- LInks from PR are not working so only verified on https://www.guyrutenberg.com/wp-content/uploads/2007/11/alertloop.html
from brave-ios.
Related Issues (20)
- Tabs do not restore their titles only url
- Solana DApp Connect Show Multiple Accounts
- Sort test network tokens to end of Select Token to Send
- URL Bar Context Menu is interfering with URL Bar Custom Buttons Long Press Action
- [Follow up to #7422] "Add to playlist" button is shown outside of search bar HOT 1
- Tabs bar reorder crash
- Black screen issue HOT 3
- Manual test run for `1.52` on `iPhone` running `iOS 16` HOT 1
- Manual test run for `1.52` on `iPad` running `iPadOS 15`
- Carplay Issue
- Menu Changes :: Appearance
- Performance/web-compat issues on YT page
- There is no way to close "Unlock" screen with a device gesture or back button HOT 1
- Landing on the wrong screen after unlocking is done HOT 2
- Issue adding shared playlist folder
- Search results are always shown with "Google search" when using "Look Up" option even when SE is different from Google HOT 1
- Playlist popup not dismissed when selecting 'maybe later' HOT 3
- [Playlist] Not able to add an audio file to the Playlist by tapping and holding on a file HOT 2
- "Sign in with Google" is not working as expected on Reddit or Twitter websites HOT 5
- Playlist onboarding modal is not collapsed on existing profile [iOS] HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from brave-ios.