https://bugzilla.novell.com/show_bug.cgi?id=758583 https://bugzilla.novell.com/show_bug.cgi?id=758583#c0 Summary: Website opened in tab can change font in Akregator's preview panel Classification: openSUSE Product: openSUSE 12.1 Version: Final Platform: Other OS/Version: openSUSE 12.1 Status: NEW Severity: Major Priority: P5 - None Component: KDE4 Applications AssignedTo: kde-maintainers@suse.de ReportedBy: suse-beta@cboltz.de QAContact: qa-bugs@suse.de CC: security-team@suse.de Found By: Beta-Customer Blocker: --- Reported upstream as https://bugs.kde.org/show_bug.cgi?id=298677 This bug could be a security issue and I want to avoid that it gets lost in the KDE bugtracker. Copy&paste from upstream bugreport (attachments available in the upstream bugtracker) -------------------------------------------------------------------------------------- I'm using the latest openSUSE KDE 4.8.2 packages (from KDE:Distro:Factory) and Akregator 4.8.2. I was quite "surprised" to see a very different font than usual in Akregator's HTML preview area. It turned out that a page I had previously read in a tab changed the preview area's font. I'll attach a RSS feed as (half a) reproducer and a screenshot with shows the normal and the changed font side by side. However you'll need the website http://www.thedailybeast.com/articles/2012/04/12/governor-jan-brewer-signs-a... (linked in the reproducer RSS) to reproduce the issue - in other words: please check this before the page is modified or deleted ;-) The only way to reset the font is to restart Akregator. Reproducible: Always Steps to Reproduce: 1. add the attached file as feed to Akregator (using file:///path/to/the/attached.rss) 2. select the article in this feed 3. in the preview area, click the "In Arizona gilt jetzt [...]" link to open it in a new tab 4. switch to the newly opened tab 5. switch back to the article overview and check the preview area Actual Results: The website opened in a tab somehow changed the font in the preview area. Expected Results: A website opened in a tab should NEVER be able to modify the preview area. A website opened in a tab should never be able to modify the preview area, and I'm afraid it could change more than just the font... -------------------------------------------------------------------------------------- -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.