402736 - web-based handlers should open in a separate window/tab

Status: NEW

(Firefox :: File Handling, defect)

Description

[Dan Mosedale (:dmosedale, :dmose)]

At the web-based protocol design/security review, dveditz suggested that we would do well to open web-based handler links in a new window/tab, as this would restrict the ability of content in those links: at the very least, it would prevent them from forcing that browser to execute back or forward.  Dan, were there other safety measures that this would also provide?

Right now, we only open in a separate window/tab if this is done from the "Send To..." context menu item in Firefox.  Clicking an a link opens the handler in the existing browser element.

If we were to make this change, it would make the user experience for web-based handlers more like that of local applications in that the existing browser would be left untouched.  Arguably, though, this is just exacerbating existing poor UI of making certain links do something other than navigate in the current browser frame, which is different from what most links do most of the time.

I suspect this UI decision might want to be made simultaneously with a decision for 400886, since to some degree, they're both parts of the same issue.

Coherent UI here should block 1.9, I think.

Comment 1

[Vladimir Vukicevic [:vlad] [:vladv] (needinfo me, slow to respond)]

Minusig for now; push back if this starts sounding like a real issue.

Comment 2

[Dan Mosedale (:dmosedale, :dmose)]

With a few exceptions, I'm mostly focused on MailCo-related hacking now.  Reassigning a bunch of bugs to default component owners.  I'm happy to help with brainstorming/advice as needed, however.  

Search for the string MAILMONKEY to delete any bugmail generated by this change.