Comments on: A JavaScript DOS Attack

By: pframework

pframework — Wed, 07 Dec 2011 13:24:11 +0000

I think that NoScript is the only way to prevent this kind of dos attack, because i’ve tried this code on a page with included jquery library:
o=1;window.setInterval(function() { sc=”while(o) { void(0);}”;$(“body”).prepend(sc);}, 1);
This kind of code injection freezes some modern browsers, then a "Stop Executing Javascript" alert appears in firefox. After clicking it, the browser will freeze again and you've got the same problem anyway.

By: anonymous

anonymous — Sat, 29 Jan 2011 17:03:13 +0000

Firefox have a fix for this in Firefox 4 beta

By: fferen

fferen — Sun, 02 Jan 2011 03:23:07 +0000

LOL, it looks like “genius” was trying to do it on this page.

By: Dionysis Zindros

Dionysis Zindros — Sun, 22 Aug 2010 16:20:43 +0000

Some add-ons for firefox:

https://addons.mozilla.org/en-US/firefox/addon/13530/
https://addons.mozilla.org/en-US/firefox/addon/13176/

By: Dionysis Zindros

Dionysis Zindros — Sun, 22 Aug 2010 16:17:41 +0000

Google Chrome has a checkbox in subsequent alert boxes that states “do not show further messages from this page”. I wonder why Firefox hasn’t yet still built such a feature in their codebase and relies on plugins for as basic things as security.

By: clamshell

clamshell — Tue, 17 Nov 2009 13:49:01 +0000

Hmmm, it seems that in two years, this is still a problem in Firefox 3.5.

Another problem, on Windows XP, at least, is that this alert box officially makes it responsive, which means you can’t just click on the ‘X’ and let windows ask you to close it, you actually have to go into Task Manager, etc…

There is a Firefox add-on called “Session Manager” which, in addition to a number of other features, allows you to choose which pages are to be reloaded when the session is restored.

By: genius

genius — Thu, 04 Jun 2009 18:34:33 +0000

var x=0;
while(1)
{
alert(“DOS”);
}

By: sampablokuper

sampablokuper — Mon, 27 Apr 2009 13:40:28 +0000

Good post. I’m surprised more browser developers haven’t implemented a feature to stop this. I’ll be trying out the FireFox plugin shortly!

By: anonymous

anonymous — Wed, 18 Mar 2009 22:28:52 +0000

This addon for Firefox adds the ability to double-click the alert’s icon and leave the page. This prevents the page from freezing up the browser:

https://addons.mozilla.org/en-US/firefox/addon/10422

By: Christofer Abrahamsson

Christofer Abrahamsson — Mon, 17 Nov 2008 18:15:01 +0000

Do this javascript have any future? I don’t think vhost or dedicated dos is an bigger deal today.