Status

()

enhancement
P2
normal
9 months ago
3 months ago

People

(Reporter: Ehsan, Unassigned, NeedInfo)

Tracking

({dev-doc-needed, site-compat})

Firefox Tracking Flags

(Not tracked)

Details

In a similar fashion to bug 1503681, we would like to experiment with breaking opener references for pages opened via form navigations.

On the related dev-platform thread, I said this about the spec side of things:
...it's impossible to block opener reference creation upon form submission right now as far as I can tell.  This is actually a bug in the spec.  <https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#form-submission-algorithm:the-rules-for-choosing-a-browsing-context-given-a-browsing-context-name> calls into "rules for choosing a browsing context" passing only two arguments, omitting the third one (noopener) <https://html.spec.whatwg.org/multipage/browsers.html#the-rules-for-choosing-a-browsing-context-given-a-browsing-context-name>.

The web compat risk here is unknown so it may make sense to land a pref that we can turn on first on Nightly and take things from there.
Flags: needinfo?(amarchesini)
Might require some docs updates somewhere along the line.
Keywords: dev-doc-needed

https://github.com/whatwg/html/pull/4332 details changes to the HTML Standard for this. Note that it also adds the rel content/IDL attribute and the relList IDL attribute, as well as support for noopener, noreferrer, and opener, for full parity with <a> and <area>.

Summary: Make <form target="_blank"> imply noopener behaviour → Add support for <form rel>
Component: HTML: Form Submission → DOM: Core & HTML
Priority: -- → P2
You need to log in before you can comment on or make changes to this bug.