Collected research
The Attack of the Alerts and the Zombie Script (IE)
The Attack of the Alerts and the Zombie Script
In IE11 an ActiveXObject htmlFile yields a second window object whose alert ignores the user choice to suppress further dialogs, so a page can throw dialogs with no way out. Saving a self-reference on that object and calling window.open with _self stops IE destroying it, leaving setInterval code running after the victim has navigated away to another site.
Record
- Document
- The Attack of the Alerts and the Zombie Script
- Researcher
- Manuel Caballero
- Published by
- Broken Browser
- Date
- Topic
- Other
In the archive
Related sources
Tags
This page is the archive's own catalogue record. The research is the work of Manuel Caballero, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .