Open Bug 1608852 Opened 6 years ago Updated 3 years ago

Can navigate a top-level to a data: URL using noopener or noreferrer

Categories

(Core :: DOM: Navigation, defect, P3)

Product:
Core
Component:
DOM: Navigation
Type:
defect

Tracking

()

People

(Reporter: annevk, Unassigned)

References

Details

Per https://github.com/web-platform-tests/wpt/pull/17730 (note: public) I am able to navigate a top-level browsing context to a data: URL, as long as I use noopener or noreferrer to do so.

However, using data:text/html,<script>alert(1)</script> it will not execute this script (only if you focus the address bar and hit return) and redirects are not followed.

So this is not a security bug, but is another weird symptom of noopener/noreferrer.

See Also: → 1531289

I suspect this is bug 1353466.

Depends on: 1353466
Priority: -- → P3
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.