Bug#578019: libwebkit-1.0-2: makes DNS query for every mouse movement

[ian_bruce at fastmail.net]

On Sat, 17 Apr 2010 17:46:50 -0400
Michael Gilbert <michael.s.gilbert at gmail.com> wrote:

>> I have to say that I find this behaviour appalling. It seems to be a
>> security issue all by itself, and is probably a symptom of even
>> bigger problems.
> 
> it may actually be undesirable,

It may actually be completely illegitimate and pointless to try
thousands of times to resolve the domain name "." .

> but i don't think it can be considered a security issue.

As long as you don't mind having every movement of your mouse, no matter
how tiny, reported on your external network connection.

> iceweasel does pretty much the same thing anyway.

That is absolutely false. If you would try it for yourself, you would
see that it does no such thing.

> i think this has to do with page precaching, and there are options to
> disable that.

There can be no rational reason for making an unlimited number of DNS
queries for the hostname "." on the pretext that the mouse has moved. It
has to do with being a particularly stupid bug.