alwaysRaised/alwaysLowered window.open feature incorrectly disallowed to content script

RESOLVED FIXED in mozilla1.9.3a1

Status

()

Core
DOM: Core & HTML
RESOLVED FIXED
13 years ago
6 years ago

People

(Reporter: Dan M, Assigned: Saint Wesonga)

Tracking

Trunk
mozilla1.9.3a1
x86
Windows XP
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: [good first bug])

Attachments

(2 attachments)

340 bytes, text/html
Details
1018 bytes, patch
neil@parkwaycc.co.uk
: review+
Details | Diff | Splinter Review
(Reporter)

Description

13 years ago
Content script isn't allowed to use the window.open("", "", "alwaysRaised")
feature even with expanded privileges.
(Reporter)

Comment 1

13 years ago
Created attachment 168428 [details]
testcase

If the user allows the expanded privileges requested by the script in this
testcase, one of the protected window.open features (titlebar) is accepted, but
the other (alwaysRaised) is not. (Note that, last I checked, this testcase
proves nothing on *nix builds, which don't support top-level window z-level at
all.)
(Reporter)

Comment 2

13 years ago
Oops. Yeah, the testcase doesn't work when served via HTTP. To test, you'll have
to download it and run it off a local drive or set
signed.applets.codebase_principal_support true.
Whiteboard: [good first bug]

Updated

13 years ago
Blocks: 195867
Assignee: general → nobody
QA Contact: ian → general
(Assignee)

Comment 3

8 years ago
Created attachment 411879 [details] [diff] [review]
Patch
Assignee: nobody → wesongathedeveloper
Status: NEW → ASSIGNED
Attachment #411879 - Flags: review?(neil)

Comment 4

8 years ago
Comment on attachment 411879 [details] [diff] [review]
Patch

As per bug 42557 comment #15 ;-)
Attachment #411879 - Flags: review?(neil) → review+
(Assignee)

Updated

8 years ago
Keywords: checkin-needed
Shouldn't this be testable?
Flags: in-testsuite?
http://hg.mozilla.org/mozilla-central/rev/3c96b7a35fa7
Status: ASSIGNED → RESOLVED
Last Resolved: 8 years ago
Keywords: checkin-needed
Resolution: --- → FIXED
Target Milestone: --- → mozilla1.9.3a1
Flags: in-testsuite?
You need to log in before you can comment on or make changes to this bug.