This is a proof of concept for a (security)bug in Mozilla Firefox.

Summary: Mozilla Firefox does not prevent javascript to change the value of the "location.href" object if modified in the catch-block of a try-catch-statement.

Author: Sven May * sven.may@epost.de