1574766 - Container escape by wheelclick/ctrl+click on bookmarklet with javascript:document.location

Status: NEW

(Firefox :: Bookmarks & History, defect, P3)

Description

[eugeneshap]

User Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:70.0) Gecko/20100101 Firefox/70.0

Steps to reproduce:

1. I'm in container
2. I make a bookmarklet
   javascript:document.location = 'https://google.com';void(0)
3. I do wheelclick or ctrl+left click on the bookmarklet
4. => a new tab is opened, but it is no longer containered

Actual results:

4. => a new tab is opened but it is no longer containered

If the bookmarklet contains code involving changing document.location then the new tab will be opened in non-containered environment

Expected results:

A new tab should have opened in a containered mode.

I believe that this bug have similar causes to:
https://bugzilla.mozilla.org/show_bug.cgi?id=1555760
https://bugzilla.mozilla.org/show_bug.cgi?id=1555367

Comment 1

[Timea Cernea [:tbabos][inactive]]

Hi Eugeneshap,

I also believe its most likely the same as Bug 1555367 but affecting the bookmarks.
Reproduced on Nightly70 and on Beta69/Release68 too using the multi-account container addon.
Moving over to component, thanks for the report!