1740953 - Script could open any number of file pickers via simulating click on a `<a download>` link

Status: RESOLVED DUPLICATE of bug 1711049

(Core :: DOM: Core & HTML, defect)

Description

[u635660]

Steps to reproduce:

open firefox
go to https://rickroll.ndev.tk/feeder/

Actual results:

popups appear

Expected results:

it should block the popups chrome appears to

Comment 1

[Hsin-Yi Tsai (she/her)[:hsinyi]]

Edgar, perhaps you know what's up here.

Comment 2

[Edgar Chen [:edgar] (OOO ~ 07/13, 07/16 ~ 07/20)]

This is nothing to do with the popup blocker, it is about the script that could open any number of folder picks via simulating click on a <a download> link.

Comment 3

[Edgar Chen [:edgar] (OOO ~ 07/13, 07/16 ~ 07/20)]

Attachment: test.html

This is a simplified test script that tries to download 5 files.

Comment 4

[Edgar Chen [:edgar] (OOO ~ 07/13, 07/16 ~ 07/20)]

If the user chooses "Always ask you where to save file" in the about:preferences, we will show 5 file-save pickers simultaneously, or just start downloading 5 files. What Chrome does is show a permission dialog inform the user that the page will download multiple files and ask if the user allows doing so, and it shows the picker one by one. Safari seems to allow showing only two pickers at the time and ignore subsequent download actions.

Comment 5

[Daniel Veditz [:dveditz]]

This is being worked on in bug 1711049