1389224 - HTML form with POST elements not working in popup webextension

Status: RESOLVED DUPLICATE of bug 1344465

(WebExtensions :: General, defect)

Description

[info]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55.0
Build ID: 20170803103124

Steps to reproduce:

Install QR Code extension from https://addons.mozilla.org/nl/firefox/addon/qr-code-image-generator/?src=search
Go to a website and click on the QR button
Popup appers with QR code
Click on Edit QR Code Image


Actual results:

Redirect to qrutils.com website WITHOUT the QR code data submitted.


Expected results:

Redirect to qrutils.com website WITH the QR code data submitted. The data is submitted with a POST HTML form element. Since FF55 it is not working anymore.

Comment 1

[Andy McKay]

I get the same results in Firefox 54 and Nightly, I get the QR page website. I threw together a quick example extension that succesfully does a POST to the QR website (attached).

If you can show this is a problem with the WebExtensions framework, we'll re-open, but I think this is something that needs fixing in the extension.

Comment 2

[Andy McKay]

Attachment: example.xpi

Comment 3

[info]

Thank you for looking into it.

Your extension example opens the website inside the popup. In that case it is working.

But if you add target="_blank" to your form element, to open the website in a new tab instead of the popup, it is not working. Thats why i think the problem is in the Webextension framework.

Comment 5

[Andrew L]

Andy,

We're running into a problem I hope you can help with.

In an effort to block external parties from injecting malicious code on our New Tab page, we decided to load the page within an iframe. When performing a form POST which targets a new tab, we noticed the POST data is discarded by the WebExtension (as previously stated here). 
A similar setup outside of the WebExtension works as expected, the POST request is successful and results are displayed on the new tab. Please note the expected behavior is currently supported by Chrome Extension. In order to properly secure our extensions we need to be able to POST results from an iframe and load expected results on a new tab.

Is there an update on a resolution for this bug or a suggested work around for us to move forward? Thanks for your help