Page behind the open mobile menu still scrolls
Maintainers usually reply within 1 day
Nobody has claimed this yet.
Assessment
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Newbie friendliness
- 76/100
- Issue type
- Bug
- Clarity
- Clearly specified
- Activity status
- Active
- Tech stack
- css, html
- Domain
- frontend
Research direction
Start by locating the mobile menu toggle and its open and close handling, then reproduce the issue at 390x844 and check the page's scroll position while the menu is open. Lock background scrolling while the menu is open, restore it on close, Escape, and resize to desktop, and verify that scrolling works again after each close path.
Written by the indexing model from the issue text.
Description
Summary
When the mobile navigation menu is open, the page behind it still scrolls. The menu covers the top of the page while the content moves underneath it.
Steps to reproduce
- Open
/OWASP-Hunting/payloads/sql-injection/at 390x844. - Tap the menu button.
- Scroll with the wheel or touch.
Expected
Background scrolling is locked while the menu is open.
Actual
scrollY goes from 0 to 500 after one wheel event with the menu open, and body has overflow: visible. Focus does move to the Close button, so keyboard handling is fine.

Suggested fix
Set overflow: hidden on html or body while the menu is open and restore it on close, including on Escape and on resize to desktop.
Environment
website branch, Chromium emulating 390x844.
- Dominant language
- Python
- Stars
- 22
- Forks
- 14
- Avg merge
- 14h 14m
- Merged PRs (30d)
- 29
Getting set up
- No Dockerfile or Docker Compose file
- Has a pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from OWASP/OWASP-Hunting
-
enhancement Website
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
OWASP/OWASP-Hunting#96 ·
Maintainers usually reply within 1 day
-
enhancement Website
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
OWASP/OWASP-Hunting#93 ·
Maintainers usually reply within 1 day
-
enhancement Website
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
OWASP/OWASP-Hunting#92 ·
Maintainers usually reply within 1 day
-
bug Website
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
OWASP/OWASP-Hunting#91 ·
Maintainers usually reply within 1 day
-
bug Website
Difficulty 2/5 1-3 hours Newbie friendliness 79/100
OWASP/OWASP-Hunting#90 ·
Maintainers usually reply within 1 day
All issues in OWASP/OWASP-Hunting
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 67/100
FinanceFlash/unvibecode#699 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
micropython/micropython#19942 ·
Maintainers usually reply within 1 day
-
A rebuild posts "not part of this build" success to the commit's failed `nix-build` gate and effectsPossibly taken @Padraic-O-Mhuiris claimed this today. Open
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
Maintainers usually reply within 1 day
-
`epoch.Integer` raises a raw OverflowError for integers too large to convert to a floatPossibly taken @arindam77 claimed this today. Open
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
pydantic/pydantic-extra-types#479 ·
Maintainers usually reply within 1 day
-
Make the Elasticsearch request timeout of the API configurablePossibly taken @SaitejaKommi claimed this today. OpenAPI backend
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
openfoodfacts/search-a-licious#601 ·
Maintainers usually reply within 2 days