Spotplex + ' = Firefox Crash?
I was checking out Spotplex (The actual site is having some problems it looks like), but I saw that they're outlink.php page consisted only of what seemed to be:
<script language='Javascript'> location.replace('$_GET['url']'); </script>
Decided to see if I could an XSS going. So I tried http://www.spotplex.com/outlink.php?url=http://google.com' (Warning, may crash you)
Firefox locked up. IE 7 just says server not found.
Going to http://google.com' just gives a server not found error. Seems like a genuine Firefox bug.
Update: Looks like this is a bug with one of my extensions. Tried out Firefox Portable with no extensions, and it goes to the server not found page. It also crashes on:
<script language='JavaScript'> location.replace('http://google.com"'); </script>
I'm not going to jump to conclusions on which extension causes the problem, but I'm going to say Search Status.
It was entertaining for a bit, I guess.