JavaScript can force wanted pop up window to close if you click location bar

RESOLVED WONTFIX

Status

()

RESOLVED WONTFIX
11 years ago
5 years ago

People

(Reporter: gorodholm, Unassigned)

Tracking

Trunk
x86
Windows XP
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: wontfix?, URL)

(Reporter)

Description

11 years ago
User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a8) Gecko/2007091216 GranParadiso/3.0a8
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a8) Gecko/2007091216 GranParadiso/3.0a8

Pop up window in Firefox 3.0(Gran Paradiso) will have location bar. So that user can easily copy and alter current URL. But JavaScript can meddle in user interface when coping or changing URl. If pop up has following code it will be closed when clicked in location bar:
onBlur="self.close()" onClick="self.close()"

Reproducible: Always

Steps to Reproduce:
1. Open test page.
2. Click an image in the gallery
3. Pop up will open with an image.
4. Click anywhere in location bar.
Actual Results:  
Wanted pop up window will close.

Expected Results:  
Wanted pop up window will not close. Instead I should be able to play around with URL.
Summary: JavaScript can force wanted pop up window to close if u click location bar → JavaScript can force wanted pop up window to close if you click location bar

Comment 1

11 years ago
The forced location bar is there to guarantee that you know where you are; it's
an anti-spoofing measure.  It's not there to *guarantee* that you can copy the
URL or navigate to a different page.

I don't think it would make sense for Firefox to stop sending web pages onblur
events or limit when scripts can can call window.close() on popups.
Bulk closing all UNCONFIRMED bugs dealing with places that haven't had any bug activity in over 120 days, have no votes, and are not enhancement requests.

If you are still experiencing this issue in Firefox 3.0 or later, please re-open the bug with steps to reproduce (if they were not part of the original comment).
Status: UNCONFIRMED → RESOLVED
Last Resolved: 10 years ago
Resolution: --- → INCOMPLETE

Comment 3

10 years ago
The reporter believes this is an annoyance or security hole, so this should get a real WONTFIX if we're not going to fix it.
Status: RESOLVED → UNCONFIRMED
Resolution: INCOMPLETE → ---

Updated

10 years ago
Whiteboard: wontfix?
(Reporter)

Comment 4

8 years ago
Yes, I regard this as an annoyance.

to: Shawn Wilsher :sdwilsh
I'm still experiencing the issue in 3.7a6pre. The test URL seems to be working even now.

to: Jesse Ruderman
The location bar should guarantee that I can click it and have no undesirable consequences. Because it's my location bar. You would not expect your firefox to quit if you click a menu item or even the awesomebar, wouldn't you?

Updated

8 years ago
Version: unspecified → Trunk

Comment 5

5 years ago
Reproduced with Nightly 25.0a1 (Build ID: 20130724222711). I've encountered the same issue on Chrome and Opera; Safari doesn't even open the popup;
So this is a site issue.
Status: UNCONFIRMED → RESOLVED
Last Resolved: 10 years ago5 years ago
Resolution: --- → INVALID

Updated

5 years ago
Resolution: INVALID → WONTFIX
You need to log in before you can comment on or make changes to this bug.