Closed Bug 1691203 Opened 4 years ago Closed 4 years ago

Opening Youtube from a sandboxed iframe is broken

Categories

(Core :: DOM: Security, defect)

Product:
Core
Component:
DOM: Security
Type:
defect

Tracking

()

Status:
RESOLVED INVALID

People

(Reporter: evilpies, Unassigned)

References

(Regression)

Details

(Keywords: regression)

Bug 1521542 broke opening Youtube in a new tab from a sandbox in a weird way. The page opens, but everything looks broken and only a few page elements load.

<iframe srcdoc="<a target=_blank href=https://www.youtube.com/watch?v=62j1xAdYKAQ rel=noreferrer>Open Youtube</a>" sandbox="allow-popups"></iframe>

Summary: Opening a Youtube from a sandboxed iframe is broken → Opening Youtube from a sandboxed iframe is broken

It's the exact same in Chrome so I suspect that's the result of sandboxing it. If you add allow-popups-to-escape-sandbox it's fine.

Oh I wasn't aware of allow-popups-to-escape-sandbox. I thought that was just the default behavior. In that case this is just invalid.

Status: NEW → RESOLVED
Closed: 4 years ago
Resolution: --- → INVALID
Has Regression Range: --- → yes
Keywords: regression
You need to log in before you can comment on or make changes to this bug.