PatchGap
Firefox · DOM

CVE-2026-92074

Logic Error in DOM
Low firefox Logic Error 🔧 Commit mapped

Overview

Low
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Impactlow
DescriptionMitigation bypass in the Popup Blocker component
ComponentDOM
Bug ClassLogic Error
Tracker2063539
Fix commitb1523944cf73 (firefox) +2/-4
CISA KEVNot listed
CreditedFinn Westendorf
Disclosed2026-09-15

Changed Functions

FunctionChangeNotes
if
dom/base/nsGlobalWindowOuter.cpp
 modified

Files Changed

  • dom/base/nsGlobalWindowOuter.cpp

Patch

view commit
diff --git a/dom/base/nsGlobalWindowOuter.cpp b/dom/base/nsGlobalWindowOuter.cpp
index e9dd6d63063..ca953f8b990 100644
--- a/dom/base/nsGlobalWindowOuter.cpp
+++ b/dom/base/nsGlobalWindowOuter.cpp
@@ -3854,10 +3854,8 @@ bool nsGlobalWindowOuter::WindowExists(const nsAString& aName,
                                        bool aLookForCallerOnJSStack) {
   MOZ_ASSERT(mDocShell, "Must have docshell");
 
-  if (aForceNoOpener) {
-    return aName.LowerCaseEqualsLiteral("_self") ||
-           aName.LowerCaseEqualsLiteral("_top") ||
-           aName.LowerCaseEqualsLiteral("_parent");
+  if (aForceNoOpener && !nsContentUtils::IsSpecialName(aName)) {
+    return false;
   }
 
   if (WindowGlobalChild* wgc = mInnerWindow->GetWindowGlobalChild()) {
Loading diff…
On This Page