Open Bug 1782382 Opened 2 years ago Updated 2 years ago

[NSFW] "dom.popup_allowed_events" no longer able to strictly block pop-ups

Categories

(Core :: DOM: Core & HTML, defect, P3)

Firefox 103
defect

Tracking

()

Tracking Status
firefox-esr91 --- unaffected
firefox-esr102 --- affected
firefox103 --- wontfix
firefox104 --- wontfix
firefox105 --- wontfix
firefox106 --- wontfix

People

(Reporter: u710971, Unassigned)

References

(Blocks 1 open bug, Regression)

Details

(Keywords: regression)

Steps to reproduce:

Go about:config
Set "dom.popup_allowed_events" to blank
Visit the following page
https://streamtape.com/e/kgg1o6jpeJSPoe/?autostart=true
Close out the initial nsfw ads/overlays if any
Now rapidly click the purple play button keep doing it until new-window popup appears

Actual results:

New-window popup appears after clicking on the video multiple times.

Expected results:

No matter how many times i keep clicking anywhere on the video there should be no popups ever.

I also tested with an older version of Firefox (83.0) and the behavior is completely superior to newer Firefox versions, the popups are all consistently blocked, as long as "dom.popup_allowed_events" is set to blank.

The Bugbug bot thinks this bug should belong to the 'Core::DOM: Core & HTML' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.

Component: Untriaged → DOM: Core & HTML
Product: Firefox → Core

I think it is because of the changes in bug 1733052 which allows opening a popup within a valid transient user activation. So I guess in some case the webpage tries to open a popup asynchronously after use click the page, in this case we don't check the "dom.popup_allowed_events". In long-term, we would like to move popup blocker to follow the user activation defined in spec, which will be a bit tricky to continues support allow-event-list (bug 1733062), for the special case, i.e. set to empty string, maybe we could consider adding a another way to enable "always-block-popup" mode if it is widely used by users (bug 1782962).

Severity: -- → S3
Priority: -- → P3
Regressed by: 1733052
Blocks: 1656444

Set release status flags based on info from the regressing bug 1733052

https://addons.mozilla.org/en-US/firefox/addon/popup-blocker-ultimate/

This pop-up blocker add-on is affected in the same exact way, before it used to be able to block all pop-ups similar to "dom.popup_allowed_events"
but now it no longer is able to on these newer Firefox versions, it lets popups through.

https://addons.mozilla.org/en-US/firefox/addon/popup-blocker-ultimate/
That's 60,000+ users already for your stats.

The bug has a release status flag that shows some version of Firefox is affected, thus it will be considered confirmed.

Status: UNCONFIRMED → NEW
Ever confirmed: true

Set release status flags based on info from the regressing bug 1733052

You need to log in before you can comment on or make changes to this bug.