HexBrain

Brave Software · Report #181686

[DOS] Browser hangs on loading the code snippet

Validstatus
lowseverity
9upvotes
6 May 2018disclosed

How it was found

Summary:

Basically the function location.reload() is causing browser to hang as browser is not able to handle multiple reloads but similar issue cannot be seen in Firefox and chrome as i am able to close the current tab.

Products affected:

Latest brave browser in linux.

Steps To Reproduce:

Use the below code and save it as html file and then open it up on browser :-

<script> open(""); setInterval('location.reload()',1); </script>

Or

open up pop.html that i have attached

Supporting Material/References:

i have attached html file that contains the code causing denial of service,

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original